CVE-2021-1059: Integer Overflow
First published: Fri Jan 08 2021(Updated: )
NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not validated, which may lead to integer overflow, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU Manager | >=8.0<8.6 | |
| NVIDIA Virtual GPU Manager | >=11.0<11.3 | |
| Citrix Hypervisor | ||
| Nutanix Ahv | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA vGPU manager vulnerability?
The vulnerability ID for this NVIDIA vGPU manager vulnerability is CVE-2021-1059.
What is the severity of CVE-2021-1059?
The severity of CVE-2021-1059 is high with a CVSS score of 7.8.
Which software versions are affected by CVE-2021-1059?
The affected versions of NVIDIA vGPU manager are 8.x (prior to 8.6) and 11.0 (prior to 11.3).
What is the impact of this vulnerability?
This vulnerability in the vGPU plugin can lead to integer overflow, which may cause tampering of data, information disclosure, or denial of service.
Is Citrix Hypervisor vulnerable to CVE-2021-1059?
No, Citrix Hypervisor is not vulnerable to CVE-2021-1059.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/tags
- agent/event
- agent/type
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu manager
- version/nvidia virtual gpu manager/8.0
- version/nvidia virtual gpu manager/11.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/nutanix
- canonical/nutanix ahv
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere