First published: Fri Oct 02 2020(Updated: )
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin and the host driver kernel module, in which the potential exists to write to a memory location that is outside the intended boundary of the frame buffer memory allocated to guest operating systems, which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.
Credit: psirt@nvidia.com
Affected Software | Affected Version | How to fix |
---|---|---|
NVIDIA Virtual GPU Manager | >=8.0<8.5 | |
NVIDIA Virtual GPU Manager | >=10.0<10.4 | |
NVIDIA Virtual GPU Manager | =11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-5983 is a vulnerability in the NVIDIA Virtual GPU Manager that allows writing to a memory location outside the intended boundary, potentially leading to denial of service.
The affected software includes NVIDIA Virtual GPU Manager versions 8.0 to 8.5, versions 10.0 to 10.4, and version 11.0.
The severity of CVE-2020-5983 is high with a CVSS score of 7.1.
To fix CVE-2020-5983, users should update their NVIDIA Virtual GPU Manager to a patched version provided by NVIDIA.
More information about CVE-2020-5983 can be found on the NVIDIA website at https://nvidia.custhelp.com/app/answers/detail/a_id/5075.