CVE-2021-1066

CWE-20 — Improper Input ValidationCWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.1%
top 80.89%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Virtual GPU ManagerNvidia Nvidia Virtual GPU Manager
Timeline
PublishedJan 8
Latest updateMay 24

Description

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDnvidia/virtual_gpu_manager8.0 — 8.6+1
▶CVEListV5nvidia/nvidia_virtual_gpu_managerVersion 8.x (prior to 8.6) and version 11.0 (prior to 11.3)

🔴Vulnerability Details

2
GHSA
GHSA-5j69-9p6p-7984: NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of res↗2022-05-24
▶
CVEList
CVE-2021-1066: NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of res↗2021-01-08
▶
CVE-2021-1066 (MEDIUM CVSS 5.5) | NVIDIA vGPU manager contains a vuln | cvebase.io