CVE-2022-42261: Buffer Overflow
Published Dec 30, 2022
·Updated
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.
Affected Software
16 affected components
Nvidia Virtual GPU<11.11
Nvidia Virtual GPU>=12.0<13.6
Nvidia Virtual GPU>=14.0<14.4
Citrix Hypervisor
Linux Linux kernel
redhat Enterprise Linux Kernel-based Virtual Machine
VMware vSphere
Nvidia Cloud Gaming<525.60.12
Nvidia Gpu Display Driver Linux>=470<470.161.03
Nvidia Gpu Display Driver Linux>=510<510.108.03
Nvidia Geforce
Nvidia Nvs
Nvidia Quadro
Nvidia Rtx
Nvidia Gpu Display Driver Linux>=450<450.216.04
Nvidia Tesla
Event History
Dec 30, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this NVIDIA vGPU software vulnerability?
The vulnerability ID is CVE-2022-42261.
2
What is the severity of CVE-2022-42261?
The severity of CVE-2022-42261 is high (7.8).
3
What is the affected software?
The affected software includes Nvidia Virtual Gpu versions up to 11.11, versions between 12.0 and 13.6, and versions between 14.0 and 14.4.
4
What are the possible impacts of this vulnerability?
The possible impacts of this vulnerability include buffer overrun, data tampering, information disclosure, and denial of service.
5
Are Citrix Hypervisor, Linux Kernel, Redhat Enterprise Linux Kernel-based Virtual Machine, and Vmware Vsphere affected by this vulnerability?
Citrix Hypervisor, Linux Kernel, Redhat Enterprise Linux Kernel-based Virtual Machine, and Vmware Vsphere are not vulnerable to this vulnerability.