CVE-2021-1086

CWE-863 — Incorrect Authorization3 documents3 sources
Severity
7.1HIGH
EPSS
0.0%
top 87.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Virtual GPU ManagerNvidia Nvidia Virtual GPU Software
Timeline
PublishedApr 29
Latest updateMay 24

Description

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosure. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:NExploitability: 1.8 | Impact: 5.2

Affected Packages2 packages

▶NVDnvidia/virtual_gpu_manager8.0 — 8.7+2
▶CVEListV5nvidia/nvidia_virtual_gpu_softwarevGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7)

🔴Vulnerability Details

2
GHSA
GHSA-556j-5chh-24cp: NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resources, which m↗2022-05-24
▶
CVEList
CVE-2021-1086: NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resources, which m↗2021-04-29
▶