Vulnerabilities > CVE-2021-1087 - Unspecified vulnerability in Nvidia Virtual GPU Manager

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

nvidia

NVD

Published: 2021-04-29

Updated: 2022-06-28

Summary

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization (ASLR) bypass. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7).

Vulnerable Configurations

Part	Description	Count
Application	Nvidia Nvidia Virtual GPU Manager 8.0 Nvidia Virtual GPU Manager 8.1 Nvidia Virtual GPU Manager 8.2 Nvidia Virtual GPU Manager 8.3 Nvidia Virtual GPU Manager 8.4 Nvidia Virtual GPU Manager 8.5 Nvidia Virtual GPU Manager 8.6 Nvidia Virtual GPU Manager 11.0 Nvidia Virtual GPU Manager 11.1 Nvidia Virtual GPU Manager 11.2 Nvidia Virtual GPU Manager 11.3 Nvidia Virtual GPU Manager 12.0	12
OS	Citrix Citrix Hypervisor -	1
OS	Nutanix Nutanix AHV -	1
OS	Redhat Redhat Enterprise Linux Kernel Based Virtual Machine -	1
OS	Vmware Vmware Vsphere -	1

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5172