367 matches found
CVE-2021-1101
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11.5 and version 8.x prior 8.8...
CVE-2021-1099
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin that could allow an attacker to cause stack-based buffer overflow and put a customized ROP gadget on the stack. Such an attack may lead to information disclosure, data tampering, or denial of service. This affect...
CVE-2021-1098
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it doesn't release some resources during driver unload requests from guests. This flaw allows a malicious guest to perform operations by reusing those resources, which may lead to information disclosure,...
CVE-2021-1097
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input, which may lead to...
Stack overflow
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin that could allow an attacker to cause stack-based buffer overflow and put a customized ROP gadget on the stack. Such an attack may lead to information disclosure, data tampering, or denial of service. This affect...
Design/Logic Flaw
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver nvidia.ko, in which a pointer to a user-space buffer is not validated before it is dereferenced, which may lead to denial of service. This affects vGPU version 12.x prior to 12.3, version 11.x prior to 11....
Input validation
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input, which may lead to...
CVE-2021-1102
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) that may cause denial of service. The flaw arises from improper validation of the length field in a guest request, potentially enabling a guest to trigger a crash. Affected are vGPU software versions: 12.x (bef...
CVE-2021-1100
CVE-2021-1100 affects NVIDIA vGPU Software: the kernel-mode driver nvidia.ko dereferences an unvalidated user-space buffer pointer, potentially enabling denial of service. Affected lines show vGPU versions 12.x (before 12.3), 11.x (before 11.5), and 8.x (before 8.8). NVIDIA's advisory/bulletin in...
CVE-2021-1099
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin that could allow an attacker to cause stack-based buffer overflow and put a customized ROP gadget on the stack. Such an attack may lead to information disclosure, data tampering, or denial of service. This affect...
CVE-2021-1099
CVE-2021-1099 affects NVIDIA vGPU software (Virtual GPU Manager). The vulnerability is a stack-based buffer overflow in the vGPU plugin that could allow a guest to place a crafted ROP gadget on the stack, with potential information disclosure, data tampering, or denial of service. Affected are vG...
CVE-2021-1098
NVIDIA vGPU Software contains CVE-2021-1098: a vulnerability in the Virtual GPU Manager where it does not release certain resources during driver unload from guests. This can allow a malicious guest to reuse freed resources, potentially leading to information disclosure, data tampering, or denial...
CVE-2021-1097
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it improperly validates the length field in a request from a guest. This flaw allows a malicious guest to send a length field that is inconsistent with the actual length of the input, which may lead to...
Nvidia vGPU Software 代码问题漏洞
Nvidia vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A code issue vulnerabilit...
Nvidia vGPU Software 代码问题漏洞
Nvidia vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A code issue vulnerabilit...
Nvidia vGPU Software 输入验证错误漏洞
Nvidia vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation error...
Nvidia vGPU Software 资源管理错误漏洞
Nvidia vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A resource management err...
Nvidia vGPU Software 缓冲区错误漏洞
Nvidia vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A buffer error...
CVE-2021-1087
NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager vGPU plugin, which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization ASLR bypass. This affects vGPU version 12.x prior to 12.2, version 11.x prior to 11.4 and version 8.x...
CVE-2021-1083
NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager vGPU plugin, in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x prior to 12.2 and version...