NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers-tesla-460Upgrade nvidia-graphics-driversUpgrade nvidia-graphics-drivers-teslaUpgrade nvidia-graphics-drivers-tesla-470Upgrade nvidia-graphics-drivers-tesla-450 | Jul 30, 2024 | Dec 30, 2022 |
| Gentoo Linux | — | Upgrade x11-drivers/nvidia-drivers. | Oct 4, 2023 | Dec 30, 2022 |
| Ubuntu | — | Upgrade nvidia-graphics-drivers-470-serverUpgrade nvidia-graphics-drivers-450-serverUpgrade nvidia-graphics-drivers-470Upgrade nvidia-graphics-drivers-510 | Nov 19, 2024 | Dec 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub