CVE-2022-42262: Buffer Overflow
First published: Fri Dec 30 2022(Updated: )
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU | <11.11 | |
| NVIDIA Virtual GPU | >=12.0<13.6 | |
| NVIDIA Virtual GPU | >=14.0<14.4 | |
| Citrix Hypervisor | ||
| Linux Linux kernel | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere | ||
| Nvidia Cloud Gaming | <525.60.12 | |
| Nvidia Gpu Display Driver | >=470<470.161.03 | |
| Nvidia Gpu Display Driver | >=510<510.108.03 | |
| Nvidia Geforce | ||
| Nvidia Nvs | ||
| Nvidia Quadro | ||
| Nvidia Rtx | ||
| Nvidia Gpu Display Driver | >=450<450.216.04 | |
| Nvidia Tesla |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-42262?
CVE-2022-42262 is a vulnerability in the NVIDIA vGPU software Virtual GPU Manager (vGPU plugin) that can lead to buffer overrun, data tampering, information disclosure, or denial of service.
Which software is affected by CVE-2022-42262?
NVIDIA Virtual GPU software versions 11.11 to 13.6 and 14.0 to 14.4 are affected by CVE-2022-42262.
What is the severity of CVE-2022-42262?
The severity of CVE-2022-42262 is high (CVSS score 7.8).
How can CVE-2022-42262 be exploited?
CVE-2022-42262 can be exploited by sending specially crafted input to the Virtual GPU Manager, causing a buffer overrun.
Is there a fix available for CVE-2022-42262?
Yes, NVIDIA has released a fix for CVE-2022-42262. It is recommended to update to the latest version of the NVIDIA vGPU software.
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/tags
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- vendor/nvidia
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/12.0
- version/nvidia virtual gpu/14.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/linux
- canonical/linux linux kernel
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere
- canonical/nvidia cloud gaming
- canonical/nvidia gpu display driver
- version/nvidia gpu display driver/470
- version/nvidia gpu display driver/510
- canonical/nvidia geforce
- canonical/nvidia nvs
- canonical/nvidia quadro
- canonical/nvidia rtx
- version/nvidia gpu display driver/450
- canonical/nvidia tesla