First published: Tue Jun 30 2020(Updated: )
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a shared resource before using it, creating a race condition which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA Virtual GPU Manager | >=8.0<=8.3 | |
NVIDIA Virtual GPU Manager | >=9.0<=9.3 | |
NVIDIA Virtual GPU Manager | >=10.0<=10.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-5969 is a vulnerability in NVIDIA Virtual GPU Manager that allows for a race condition, leading to denial of service or information disclosure.
The severity of CVE-2020-5969 is medium, with a base score of 6.3.
NVIDIA Virtual GPU Manager versions 8.x (prior to 8.4), 9.x (prior to 9.4), and 10.x (prior to 10.3) are affected by CVE-2020-5969.
CVE-2020-5969 may lead to denial of service or information disclosure.
To mitigate the CVE-2020-5969 vulnerability, it is recommended to update NVIDIA Virtual GPU Manager to version 8.4, 9.4, or 10.3.