NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nvidia-graphics-drivers-tesla-450Upgrade nvidia-graphics-drivers-tesla-470Upgrade nvidia-graphics-drivers-tesla-460Upgrade nvidia-graphics-drivers-teslaUpgrade nvidia-graphics-drivers | Jul 30, 2024 | Dec 30, 2022 |
| Ubuntu | — | Upgrade nvidia-graphics-drivers-470-serverUpgrade nvidia-graphics-drivers-450-serverUpgrade nvidia-graphics-drivers-470Upgrade nvidia-graphics-drivers-510 | Nov 19, 2024 | Dec 30, 2022 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub