CVE-2021-1080: Input Validation
First published: Thu Apr 29 2021(Updated: )
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior 8.7).
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU Manager | >=8.0<8.7 | |
| Citrix Hypervisor | ||
| Nutanix Ahv | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere | ||
| NVIDIA Virtual GPU Manager | >=11.0<11.4 | |
| NVIDIA Virtual GPU Manager | >=12.0<12.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-1080?
CVE-2021-1080 is a vulnerability in the NVIDIA vGPU software that allows for information disclosure, data tampering, or denial of service.
Which version of vGPU software is affected by CVE-2021-1080?
vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4) are affected by CVE-2021-1080.
What is the severity of CVE-2021-1080?
CVE-2021-1080 has a severity rating of 7.8 (high).
How can CVE-2021-1080 be exploited?
CVE-2021-1080 can be exploited by providing certain input data that is not validated.
Is Citrix Hypervisor vulnerable to CVE-2021-1080?
No, Citrix Hypervisor is not vulnerable to CVE-2021-1080.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/severity
- agent/author
- agent/description
- agent/last-modified-date
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu manager
- version/nvidia virtual gpu manager/8.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/nutanix
- canonical/nutanix ahv
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere
- version/nvidia virtual gpu manager/11.0
- version/nvidia virtual gpu manager/12.0