CVE-2021-1085: Input Validation
NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges and information disclosure but attacker doesn't have control over what information is obtained. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA vGPU driver vulnerability?
The vulnerability ID for this NVIDIA vGPU driver vulnerability is CVE-2021-1085.
What is the severity of CVE-2021-1085?
CVE-2021-1085 has a severity rating of 7.3 (high).
What is the affected software for CVE-2021-1085?
The affected software for CVE-2021-1085 is NVIDIA Virtual GPU Manager.
What can an attacker do with this vulnerability?
With this vulnerability, an attacker can potentially manipulate data, leading to denial of service, escalation of privileges, and information disclosure.
Is Citrix Hypervisor vulnerable to this NVIDIA vGPU driver vulnerability?
No, Citrix Hypervisor is not vulnerable to this NVIDIA vGPU driver vulnerability.