Vulnerability Details CVE-2021-1083
NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 4.6
References
Products affected by CVE-2021-1083
-
cpe:2.3:a:nvidia:virtual_gpu_manager:11.0
-
cpe:2.3:a:nvidia:virtual_gpu_manager:11.1
-
cpe:2.3:a:nvidia:virtual_gpu_manager:11.2
-
cpe:2.3:a:nvidia:virtual_gpu_manager:11.3
-
cpe:2.3:a:nvidia:virtual_gpu_manager:12.0
-
cpe:2.3:o:citrix:hypervisor:-
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-
-
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-
-
cpe:2.3:o:vmware:vsphere:-