CVE-2021-1064

CWE-476 — NULL Pointer Dereference3 documents3 sources
Severity
7.1HIGH
EPSS
0.1%
top 66.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Virtual GPU ManagerNvidia Nvidia Virtual GPU Manager
Timeline
PublishedJan 8
Latest updateMay 24

Description

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages2 packages

▶NVDnvidia/virtual_gpu_manager8.0 — 8.6+1
▶CVEListV5nvidia/nvidia_virtual_gpu_managerVersion 8.x (prior to 8.6) and version 11.0 (prior to 11.3)

🔴Vulnerability Details

2
GHSA
GHSA-gg32-gf45-4mcx: NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointe↗2022-05-24
▶
CVEList
CVE-2021-1064: NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointe↗2021-01-08
▶
CVE-2021-1064 (HIGH CVSS 7.1) | NVIDIA vGPU manager contains a vuln | cvebase.io