CVE-2020-5972: High severity nvidia vgpu software vulnerability
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which local pointer variables are not initialized and may be freed later, which may lead to tampering or denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-5972.
What software is affected by CVE-2020-5972?
NVIDIA Virtual GPU Manager versions 8.x (prior to 8.4), 9.x (prior to 9.4), and 10.x (prior to 10.2) are affected.
What is the severity of CVE-2020-5972?
The severity of CVE-2020-5972 is high with a CVSS score of 7.1.
How can CVE-2020-5972 be exploited?
CVE-2020-5972 can be exploited by tampering or causing a denial of service due to uninitialized local pointer variables in the vGPU plugin of NVIDIA Virtual GPU Manager.
Where can I find more information about CVE-2020-5972?
More information about CVE-2020-5972 can be found at this link: https://nvidia.custhelp.com/app/answers/detail/a_id/5031