First published: Tue Jun 30 2020(Updated: )
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which an input data size is not validated, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA Virtual GPU Manager | >=8.0<=8.3 | |
NVIDIA Virtual GPU Manager | >=9.0<=9.3 | |
NVIDIA Virtual GPU Manager | >=10.0<=10.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this NVIDIA Virtual GPU Manager vulnerability is CVE-2020-5970.
CVE-2020-5970 may lead to tampering or denial of service.
vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4), and version 10.x (prior to 10.3) are affected by CVE-2020-5970.
The severity of CVE-2020-5970 is high with a CVSS score of 7.1.
To fix the CVE-2020-5970 vulnerability in NVIDIA Virtual GPU Manager, update to version 8.4 or higher for vGPU version 8.x, version 9.4 or higher for vGPU version 9.x, and version 10.3 or higher for vGPU version 10.x.