CVE-2020-5972

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10....

CVE-2020-5972

NVIDIA vGPU software vulnerability CVE-2020-5972 affects the vGPU plugin in NVIDIA Virtual GPU Manager. The root cause is uninitialized local pointer variables that may be freed later, enabling tampering or denial of service. Affected product lines include vGPU versions 8.x (pre-8.4), 9.x (pre-9....

CVE-2020-5971

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer, which may lead to code execution, denial of service, escalatio...

CVE-2020-5970

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10.3...

CVE-2020-5968

NVIDIA vGPU Software CVE-2020-5968 affects the vGPU plugin in the NVIDIA Virtual GPU Manager. Root cause: a boundary/resource access issue (index/pointer-based) can lead to code execution, DoS, privilege escalation, or information disclosure. Affected versions: vGPU 8.x before 8.4, 9.x before 9.4...

CVE-2020-5969

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a shared resource before using it, creating a race condition which may lead to denial of service or information disclosure. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and versio...

CVE-2020-5969

CVE-2020-5969 affects NVIDIA Virtual GPU Manager (vGPU) where the vGPU plugin validates a shared resource before use, causing a race condition that can lead to denial of service or information disclosure. Affected: vGPU versions 8.x (before 8.4), 9.x (before 9.4), and 10.x (before 10.3). Document...

PT-2020-18862

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager versions 8.x through 8.3 NVIDIA Virtual GPU Manager versions 9.x through 9.3 NVIDIA Virtual GPU Manager versions 10.x through 10.2 Description The issue is related to the vGPU plugin in NVIDIA Virtual GPU Manager,...

PT-2020-18861

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager versions 8.x through 8.3 NVIDIA Virtual GPU Manager versions 9.x through 9.3 NVIDIA Virtual GPU Manager versions 10.x through 10.2 Description The issue is related to a buffer access mechanism in the vGPU plugin, whe...

PT-2020-18858

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager versions 8.x through 8.3 NVIDIA Virtual GPU Manager versions 9.x through 9.3 NVIDIA Virtual GPU Manager versions 10.x through 10.2 Description The issue arises from the software's failure to properly restrict...

PT-2020-18859

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager versions 8.x through 8.3 NVIDIA Virtual GPU Manager versions 9.x through 9.3 NVIDIA Virtual GPU Manager versions 10.x through 10.2 Description The issue is related to a race condition in the vGPU plugin of the NVIDIA...

CVE-2020-5971: Out-of-bounds Read

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer, which may lead to code execution, denial of service, escalatio...

CVE-2020-5972: Release of Invalid Pointer or Reference

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10....

CVE-2020-5968: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed by using an index or pointer, such as memory or files, which may lead to code execution, denial ...

CVE-2020-5970: Improper Input Validation

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10.3...

CVE-2020-5969: Concurrent Execution using Shared Resource with Improper Synchronization

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a shared resource before using it, creating a race condition which may lead to denial of service or information disclosure. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and versio...

CVE-2020-5973: Undefined Security Weakness

NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10.3...

PT-2020-18860

Name of the Vulnerable Software and Affected Versions NVIDIA Virtual GPU Manager versions prior to 8.4 NVIDIA Virtual GPU Manager versions prior to 9.4 NVIDIA Virtual GPU Manager versions prior to 10.3 Description The issue arises from an input data size not being validated in the vGPU plugin,...

NVIDIA Virtual GPU Manager and guest drivers vGPU input validation error vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. An input validation error vulnerability exists in NVIDIA Virtual GPU Manager and guest drivers vGPU plug-in, which can be exploited by an attacker to elevate privileges...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4404-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4404-2 advisory. USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS...