CVE-2020-5972

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and version 10.x prior to 10....

CVE-2020-5970

NVIDIA Virtual GPU Manager (vGPU) contains a vulnerability in the vGPU plugin where input data size is not validated, potentially allowing tampering or denial of service. Affected are vGPU versions: 8.x (before 8.4), 9.x (before 9.4), and 10.x (before 10.3). Mitigation: apply the NVIDIA security ...

CVE-2020-5971

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software reads from a buffer by using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer, which may lead to code execution, denial of service, escalatio...

CVE-2020-5971

The CVE-2020-5971 entry relates to NVIDIA Virtual GPU Manager (vGPU) plugin. A buffer- read weakness in the vGPU plugin allows reading from a buffer using index/pointer references beyond the buffer, potentially enabling code execution, denial of service, privilege escalation, or information discl...

CVE-2020-5972

NVIDIA vGPU software vulnerability CVE-2020-5972 affects the vGPU plugin in NVIDIA Virtual GPU Manager. The root cause is uninitialized local pointer variables that may be freed later, enabling tampering or denial of service. Affected product lines include vGPU versions 8.x (pre-8.4), 9.x (pre-9....

CVE-2020-5969

CVE-2020-5969 affects NVIDIA Virtual GPU Manager (vGPU) where the vGPU plugin validates a shared resource before use, causing a race condition that can lead to denial of service or information disclosure. Affected: vGPU versions 8.x (before 8.4), 9.x (before 9.4), and 10.x (before 10.3). Document...

CVE-2020-5968

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed by using an index or pointer, such as memory or files, which may lead to code execution, denial ...

CVE-2020-5969

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a shared resource before using it, creating a race condition which may lead to denial of service or information disclosure. This affects vGPU version 8.x prior to 8.4, version 9.x prior to 9.4 and versio...

CVE-2020-5968

NVIDIA vGPU Software CVE-2020-5968 affects the vGPU plugin in the NVIDIA Virtual GPU Manager. Root cause: a boundary/resource access issue (index/pointer-based) can lead to code execution, DoS, privilege escalation, or information disclosure. Affected versions: vGPU 8.x before 8.4, 9.x before 9.4...

A week in security (June 22 – 28)

Last week on Malwarebytes Labs, we provided a zero-day guide for 2020 featuring recent attacks and advanced preventive techniques, and we learned how to cough in the face of scammers, offering security tips for the 2020 tax season. We also looked at a web skimmer hiding within EXIF metadata that...

NVIDIA Virtual GPU Manager and guest drivers vGPU input validation error vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. An input validation error vulnerability exists in NVIDIA Virtual GPU Manager and guest drivers vGPU plug-in, which can be exploited by an attacker to elevate privileges...

Unspecified Vulnerability in NVIDIA Windows GPU Display Driver

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A security vulnerability exists in NVIDIA Windows GPU Display Driver all versions, which can be exploited by an attacker to execute code, cause a denial of service or...

NVIDIA Windows GPU Display Driver Code Issue Vulnerability (CNVD-2021-27728)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. kernel mode layer nvlddmkm.sys handler is one of the kernel mode layer handlers. A code issue vulnerability exists in the kernel mode layer nvlddmkm.sys handler...

Unspecified Vulnerability in NVIDIA Windows GPU Display Driver NVIDIA Control Panel

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform.NVIDIA Control Panel is one of the NVIDIA Control Panels. A security vulnerability exists in the NVIDIA Control Panel component of the NVIDIA Windows GPU Display Driver...

Unspecified Vulnerability in NVIDIA Windows GPU Display Driver (CNVD-2021-27725)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A security vulnerability in the Inter Process Communication APIs in the NVIDIA Windows GPU Display Driver all versions can be exploited by a local attacker to execute...

NVIDIA Windows GPU Display Driver Buffer Overflow Vulnerability (CNVD-2021-27727)

NVIDIA Windows GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Windows platform. A buffer overflow vulnerability exists in the DirectX 11 nvwgf2um/x.dll file in the NVIDIA Windows GPU Display Driver all versions, which can be exploited by an attack...

NVIDIA Linux GPU Display Driver Competitive Conditions Issue Vulnerability

NVIDIA Linux GPU Display Driver is a graphics processor GPU graphics card driver from NVIDIA dedicated to the Linux platform. A security vulnerability exists in the NVIDIA Linux GPU Display Driver. An attacker could exploit this vulnerability to cause a denial of service...

Ubuntu: Security Advisory (USN-4404-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 18.04 LTS / 20.04 LTS : NVIDIA graphics drivers vulnerabilities (USN-4404-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4404-1 advisory. Thomas E. Carroll discovered that the NVIDIA Cuda grpahics driver did not properly perform access control when performing IPC. An attacker...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-4404-2)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4404-2 advisory. USN-4404-1 fixed vulnerabilities in the NVIDIA graphics drivers. This update provides the corresponding updates for the NVIDIA Linux DKMS...