CVE-2021-1100
published 2021-07-21CVE-2021-1100: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver (nvidia.ko), in which a pointer to a user-space buffer is not…
PriorityP421medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.27%
19.4th percentile
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver (nvidia.ko), in which a pointer to a user-space buffer is not validated before it is dereferenced, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| github.com | hashicorp_nomad | >= 0 < 0.12.12 | 0.12.12 |
| github.com | hashicorp_nomad | >= 1.0.0 < 1.0.5 | 1.0.5 |
| nvidia | nvidia_virtual_gpu_software | — | — |
| nvidia | virtual_gpu | >= 11.0 < 11.5 | 11.5 |
| nvidia | virtual_gpu | >= 12.0 < 12.3 | 12.3 |
| nvidia | virtual_gpu | >= 8.0 < 8.8 | 8.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:N/A:P
vendor_cisco6.7MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-qp98-xmvw-85jp: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver (nvidia
ghsa_unreviewed·2022-05-24
CVE-2021-1100 [MEDIUM] GHSA-qp98-xmvw-85jp: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver (nvidia
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager kernel mode driver (nvidia.ko), in which a pointer to a user-space buffer is not validated before it is dereferenced, which may lead to denial of service. This affects vGPU version 12.x (prior to 12.3), version 11.x (prior to 11.5) and version 8.x (prior 8.8).
GHSA
Improper network isolation in Hashicorp Nomad
ghsa·2021-06-24
CVE-2021-32575 [MEDIUM] CWE-1100 Improper network isolation in Hashicorp Nomad
Improper network isolation in Hashicorp Nomad
HashiCorp Nomad and Nomad Enterprise up to version 1.0.4 bridge networking mode allows ARP spoofing from other bridged tasks on the same node. Fixed in 0.12.12, 1.0.5, and 1.1.0 RC1.
Cisco
Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
vendor_cisco·2021-03-24·CVSS 6.7
CVE-2021-1441 [MEDIUM] CWE-78 Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time.
This vulnerability is due to incorrect validations of parameters passed to a diagnostic script that is executed when the device boots up. An attacker could exploit this vulnerability by tampering with an executable file stored on a device. A successful exploit could allow the attacker to execute unsigned code at boot time and bypass the software image verification check part of the secure boot process of an affected device.
T
Cisco
Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
vendor_cisco·CVSS 3.1
CVE-2021-1441 Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
CVE-2021-1441: Cisco IOS XE Software Hardware Initialization Routines Arbitrary Code Execution Vulnerability
A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is due to incorrect validations of parameters passed to a diagnostic script that is executed when the device boots up. An attacker could exploit this vulnerability by tampering with an executable file stored on a device. A successful exploit could allow the attacker to execute unsigned code at boot time and bypass the software image verification check part of the secure boot process of an affec
Suricata
ET EXPLOIT Zyxel NWA-1100-NH Command Injection Attempt (CVE-2021-4039)
suricata·2022-06-01·CVSS 9.8
CVE-2021-4039 [CRITICAL] ET EXPLOIT Zyxel NWA-1100-NH Command Injection Attempt (CVE-2021-4039)
ET EXPLOIT Zyxel NWA-1100-NH Command Injection Attempt (CVE-2021-4039)
Rule: alert http any any -> [$HTTP_SERVERS,$HOME_NET] any (msg:"ET EXPLOIT Zyxel NWA-1100-NH Command Injection Attempt (CVE-2021-4039)"; flow:established,to_server; http.method; content:"POST"; http.uri; bsize:17; content:"/login/login.html"; fast_pattern; http.request_body; content:"myname="; content:"mypasswd="; content:"Submit=Login"; pcre:"/myname=[^&]+(?:[\x60\x3b\x7c\x26]|%60|%3b|%7c|%26|(?:[\x3c\x3e\x24]|%3c|%3e|%24)(?:\x28|%28))/i"; reference:url,www.zyxel.com/support/OS-command-injection-vulnerability-of-NWA1100-NH-access-point.shtml; reference:url,cybersecurity.att.com/blogs/labs-research/rapidly-evolving-iot-malware-enemybot-now-targeting-content-management-system-servers; reference:url,www.exploit-db.com/ex
No writeups or analysis indexed.
2021-07-21
Published