Lucene search
Ubuntu.comUB:CVE-2022-42261HistoryDec 30, 2022 - 12:00 a.m.
CVE-2022-42261
2022-12-3000:00:00
ubuntu.com
ubuntu.com
7
nvidia vgpu manager
vulnerability
cve-2022-42261
buffer overrun
data tampering
information disclosure
denial of service
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
13.0%
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager
(vGPU plugin), where an input index is not validated, which may lead to
buffer overrun, which in turn may cause data tampering, information
disclosure, or denial of service.
Notes
| Author | Note |
|---|---|
| mdeslaur | some binary drivers are no longer support by NVidia, so they are marked as ignored here |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 16.04 | noarch | nvidia-graphics-drivers-384 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | nvidia-graphics-drivers-450-server | < 450.216.04-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | nvidia-graphics-drivers-450-server | < 450.216.04-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | nvidia-graphics-drivers-450-server | < 450.216.04-0ubuntu0.22.04.1 | UNKNOWN |
| ubuntu | 22.10 | noarch | nvidia-graphics-drivers-450-server | < 450.216.04-0ubuntu0.22.10.1 | UNKNOWN |
| ubuntu | 23.04 | noarch | nvidia-graphics-drivers-450-server | < 450.216.04-0ubuntu1 | UNKNOWN |
| ubuntu | 18.04 | noarch | nvidia-graphics-drivers-470 | < 470.161.03-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | nvidia-graphics-drivers-470 | < 470.161.03-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | nvidia-graphics-drivers-470 | < 470.161.03-0ubuntu0.22.04.1 | UNKNOWN |
| ubuntu | 22.10 | noarch | nvidia-graphics-drivers-470 | < 470.161.03-0ubuntu0.22.10.1 | UNKNOWN |
Related
nvd
nvd
CVE-2022-42261
2022-12-30 23:15:11
cve
cve
CVE-2022-42261
2022-12-30 23:15:11
debiancve
debiancve
CVE-2022-42261
2022-12-30 23:15:11
prion
prion
Design/Logic Flaw
2022-12-30 23:15:00
cvelist
cvelist
CVE-2022-42261
2022-12-30 00:00:00
nessus
nessus
NVIDIA Virtual GPU Manager Multiple Vulnerabilities (November 2022)
2023-09-14 00:00:00
NVIDIA Linux GPU Display Driver (Nov 2022)
2022-12-02 00:00:00
GLSA-202310-02 : NVIDIA Drivers: Multiple Vulnerabilities
2023-10-03 00:00:00
nvidia
nvidia
Security Bulletin: NVIDIA GPU Display Driver - November 2022
2022-11-29 00:00:00
gentoo
gentoo
NVIDIA Drivers: Multiple Vulnerabilities
2023-10-03 00:00:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
13.0%
Related for UB:CVE-2022-42261