CVE-2023-0197: Null Pointer Dereference
First published: Sat Apr 01 2023(Updated: )
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
Credit: psirt@nvidia.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| NVIDIA Virtual GPU | <11.12 | |
| NVIDIA Virtual GPU | >=13.0<13.7 | |
| NVIDIA Virtual GPU | >=15.0<15.2 | |
| Citrix Hypervisor | ||
| Redhat Enterprise Linux Kernel-based Virtual Machine | ||
| VMware vSphere |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA vGPU vulnerability?
The vulnerability ID for this NVIDIA vGPU vulnerability is CVE-2023-0197.
What is the description of the NVIDIA vGPU vulnerability?
The NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where a malicious user in a guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
What software is affected by this NVIDIA vGPU vulnerability?
The affected software includes NVIDIA Virtual GPU versions 11.12, 13.0-13.7, and 15.0-15.2.
What is the severity rating of the NVIDIA vGPU vulnerability?
The severity rating of the NVIDIA vGPU vulnerability is medium, with a severity value of 6.5.
How can I fix the NVIDIA vGPU vulnerability?
To fix the NVIDIA vGPU vulnerability, it is recommended to update to the latest version of the NVIDIA Virtual GPU software.
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/nvidia
- canonical/nvidia virtual gpu
- version/nvidia virtual gpu/13.0
- version/nvidia virtual gpu/15.0
- vendor/citrix
- canonical/citrix hypervisor
- vendor/redhat
- canonical/redhat enterprise linux kernel-based virtual machine
- vendor/vmware
- canonical/vmware vsphere