CVE-2020-5973
First published: Tue Jun 30 2020(Updated: )
Last updated 24 July 2024
Credit: psirt@nvidia.com psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU | >=8.0<=8.3 | |
| NVIDIA Virtual GPU | >=9.0<=9.3 | |
| NVIDIA Virtual GPU | >=10.0<=10.2 | |
| Canonical Ubuntu Linux | =18.04 | |
| Canonical Ubuntu Linux | =19.10 | |
| Canonical Ubuntu Linux | =20.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvidia.custhelp.com/app/answers/detail/a_id/5031
- https://usn.ubuntu.com/4404-1/
- https://usn.ubuntu.com/4404-2/
- https://launchpad.net/bugs/cve/CVE-2020-5973
- https://security-tracker.debian.org/tracker/CVE-2020-5973
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-5973
- https://nvd.nist.gov/vuln/detail/CVE-2020-5973
- https://ubuntu.com/security/CVE-2020-5973
Frequently Asked Questions
What is CVE-2020-5973?
CVE-2020-5973 is a vulnerability in the NVIDIA Virtual GPU Manager and the guest drivers that allows for the potential execution of privileged operations, leading to denial of service.
Which versions of vGPU are affected by CVE-2020-5973?
vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4), and version 10.x (prior to 10.3) are affected by CVE-2020-5973.
What is the severity of CVE-2020-5973?
CVE-2020-5973 has a severity value of 4.4 (medium severity).
How can I fix CVE-2020-5973?
To fix CVE-2020-5973, update your NVIDIA Virtual GPU Manager and guest drivers to version 8.4 or higher for vGPU version 8.x, version 9.4 or higher for vGPU version 9.x, and version 10.3 or higher for vGPU version 10.x.
Where can I find more information about CVE-2020-5973?
You can find more information about CVE-2020-5973 at the following references: https://nvidia.custhelp.com/app/answers/detail/a_id/5031, https://usn.ubuntu.com/4404-1/, https://usn.ubuntu.com/4404-2/.
- collector/nvd-index
- agent/type
- collector/launchpad-cve
- source/Launchpad
- collector/security-tracker-debian
- source/Debian
- agent/first-publish-date
- agent/author
- agent/severity
- agent/description
- collector/nvd-cve
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/event
- agent/tags
- collector/usn-cve
- source/Ubuntu
- vendor/nvidia
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/8.0
- version/nvidia virtual gpu/8.3
- version/nvidia virtual gpu/9.0
- version/nvidia virtual gpu/9.3
- version/nvidia virtual gpu/10.0
- version/nvidia virtual gpu/10.2
- vendor/canonical
- canonical/canonical ubuntu linux
- version/canonical ubuntu linux/18.04
- version/canonical ubuntu linux/19.10
- version/canonical ubuntu linux/20.04