CVE-2021-1085: Input Validation
First published: Thu Apr 29 2021(Updated: )
NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges and information disclosure but attacker doesn't have control over what information is obtained. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU Manager | >=8.0<8.7 | |
| Citrix Hypervisor | ||
| Nutanix Ahv | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere | ||
| NVIDIA Virtual GPU Manager | >=11.0<11.4 | |
| NVIDIA Virtual GPU Manager | >=12.0<12.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA vGPU driver vulnerability?
The vulnerability ID for this NVIDIA vGPU driver vulnerability is CVE-2021-1085.
What is the severity of CVE-2021-1085?
CVE-2021-1085 has a severity rating of 7.3 (high).
What is the affected software for CVE-2021-1085?
The affected software for CVE-2021-1085 is NVIDIA Virtual GPU Manager.
What can an attacker do with this vulnerability?
With this vulnerability, an attacker can potentially manipulate data, leading to denial of service, escalation of privileges, and information disclosure.
Is Citrix Hypervisor vulnerable to this NVIDIA vGPU driver vulnerability?
No, Citrix Hypervisor is not vulnerable to this NVIDIA vGPU driver vulnerability.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu manager
- version/nvidia virtual gpu manager/8.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/nutanix
- canonical/nutanix ahv
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere
- version/nvidia virtual gpu manager/11.0
- version/nvidia virtual gpu manager/12.0