CVE-2021-1080: Input Validation
Published Apr 29, 2021
·Updated
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior 8.7).
Affected Software
7 affected components
Nvidia Virtual GPU Manager>=8.0<8.7
Citrix Hypervisor
Nutanix Ahv
redhat Enterprise Linux Kernel-based Virtual Machine
VMware vSphere
Nvidia Virtual GPU Manager>=11.0<11.4
Nvidia Virtual GPU Manager>=12.0<12.2
Event History
Apr 29, 2021
CVE Published
via MITRE·06:50 PM
Data Sourced
via MITRE·06:50 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-1080?
CVE-2021-1080 is a vulnerability in the NVIDIA vGPU software that allows for information disclosure, data tampering, or denial of service.
2
Which version of vGPU software is affected by CVE-2021-1080?
vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4) are affected by CVE-2021-1080.
3
What is the severity of CVE-2021-1080?
CVE-2021-1080 has a severity rating of 7.8 (high).
4
How can CVE-2021-1080 be exploited?
CVE-2021-1080 can be exploited by providing certain input data that is not validated.
5
Is Citrix Hypervisor vulnerable to CVE-2021-1080?
No, Citrix Hypervisor is not vulnerable to CVE-2021-1080.