NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers-tesla-450Upgrade nvidia-graphics-driversUpgrade nvidia-graphics-drivers-tesla-470Upgrade nvidia-graphics-drivers-tesla-460Upgrade nvidia-graphics-drivers-tesla | Jul 30, 2024 | Dec 30, 2022 |
| Ubuntu | — | Upgrade nvidia-graphics-drivers-510Upgrade nvidia-graphics-drivers-470Upgrade nvidia-graphics-drivers-470-serverUpgrade nvidia-graphics-drivers-450-server | Nov 19, 2024 | Dec 30, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub