CVE-2020-5989

CWE-476 — NULL Pointer Dereference6 documents4 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 84.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Virtual GPU ManagerNvidia Nvidia Vgpu Software
Timeline
PublishedOct 2
Latest updateMay 24

Description

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDnvidia/virtual_gpu_manager8.0 — 8.5+1
▶CVEListV5nvidia/nvidia_vgpu_softwarevGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

🔴Vulnerability Details

2
GHSA
GHSA-gggj-chjh-w3jf: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial of servic↗2022-05-24
▶
CVEList
CVE-2020-5989: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it can dereference a NULL pointer, which may lead to denial of servic↗2020-10-02
▶

🕵️Threat Intelligence

1
Trendmicro
RCE Bug Returns in ISC BIND Server↗2021-02-25
▶
CVE-2020-5989 (MEDIUM CVSS 5.5) | NVIDIA Virtual GPU Manager contains | cvebase.io