CVE-2021-1084

May 28, 2021

NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4).

Summary:

NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4).

Reference Links(if available):

  • https://nvidia.custhelp.com/app/answers/detail/a_id/5172

  • CVSS Score (if available)

    v2: / MEDIUMAV:L/AC:L/Au:N/C:N/I:P/A:P

    v3: / HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

    Links to Exploits(if available)

  • You may have missed

    image

    [BIANLIAN] – Ransomware Victim: Silverback Exploration

    November 21, 2024
    image

    [FOG] – Ransomware Victim: Fifteenfortyseven Critical Systems Realty (1547realty[.]com)

    November 21, 2024
    image

    [BIANLIAN] – Ransomware Victim: Kellerhals Ferguson Kroblin PLLC

    November 21, 2024
    image

    [FOG] – Ransomware Victim: Hogan Mfg (hoganmfg[.]com)

    November 21, 2024
    image

    [QILIN] – Ransomware Victim: DMF Lighting

    November 21, 2024