CVE-2021-1082: High severity nvidia vgpu software vulnerability
Published Apr 29, 2021
·Updated
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7)
Affected Software
7 affected components
Nvidia Virtual GPU Manager>=8.0<8.7
Citrix Hypervisor
Nutanix Ahv
redhat Enterprise Linux Kernel-based Virtual Machine
VMware vSphere
Nvidia Virtual GPU Manager>=11.0<11.4
Nvidia Virtual GPU Manager>=12.0<12.2
Event History
Apr 29, 2021
CVE Published
via MITRE·06:50 PM
Data Sourced
via MITRE·06:50 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this NVIDIA vGPU software vulnerability?
The vulnerability ID for this NVIDIA vGPU software vulnerability is CVE-2021-1082.
2
What is the severity of CVE-2021-1082?
The severity of CVE-2021-1082 is high with a CVSS score of 7.8.
3
What is the affected software for CVE-2021-1082?
The affected software for CVE-2021-1082 is NVIDIA Virtual GPU Manager versions 8.x (prior to 8.7), 11.x (prior to 11.4), and 12.x (prior to 12.2).
4
What are the potential consequences of CVE-2021-1082?
CVE-2021-1082 may lead to information disclosure, tampering of data, or denial of service.
5
Is Citrix Hypervisor affected by CVE-2021-1082?
No, Citrix Hypervisor is not affected by CVE-2021-1082.