CVE-2021-1060: Input Validation
First published: Fri Jan 08 2021(Updated: )
NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU Manager | >=8.0<8.6 | |
| NVIDIA Virtual GPU Manager | >=11.0<11.3 | |
| Citrix Hypervisor | ||
| Linux Linux kernel | ||
| Microsoft Windows | ||
| Nutanix Ahv | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-1060.
What is the severity of CVE-2021-1060?
The severity of CVE-2021-1060 is high with a CVSS score of 7.1.
Which software is affected by CVE-2021-1060?
NVIDIA vGPU software versions 8.x (prior to 8.6) and 11.0 (prior to 11.3) are affected.
How can the vulnerability be exploited?
The vulnerability can be exploited by tampering with data or causing denial of service through the guest kernel mode driver and vGPU plugin.
How can I fix CVE-2021-1060?
To fix CVE-2021-1060, update your NVIDIA vGPU software to version 8.6 or 11.3 or later.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/description
- agent/tags
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu manager
- version/nvidia virtual gpu manager/8.0
- version/nvidia virtual gpu manager/11.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/linux
- canonical/linux linux kernel
- vendor/microsoft
- canonical/microsoft windows
- vendor/nutanix
- canonical/nutanix ahv
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere