Medium WID-SEC-2022-2340 8 CVEs

Nvidia Treiber: Mehrere Schwachstellen

Published Apr 26, 2021 · Updated Dec 14, 2022 · Revision 3 · de-DE

Vendor: Lenovo Vendor: NVIDIA Product: Computer vGPU Product: Treiber vGPU

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Nvidia Treiber ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.

Product

NVidia ist ein Hersteller von Grafikkarten.

Vulnerabilities 8

High 7.8

CVE-2021-1080

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is …

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021
High 7.8

CVE-2021-1081

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU manager (vGPU plugin), in…

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021
High 7.8

CVE-2021-1082

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which an input length is not…

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021
High 7.8

CVE-2021-1083

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in…

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021
High 7.8

CVE-2021-1084

NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in w…

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021
High 7.3

CVE-2021-1085

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to w…

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021
High 7.1

CVE-2021-1086

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control …

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021
Medium 5.5

CVE-2021-1087

NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to …

NVIDIA NVIDIA Virtual GPU Software

Apr 29, 2021

Revision history

2022-12-14 #3
Referenz(en) aufgenommen: HPSBHF03724
2021-05-11 #2
Neue Updates von LENOVO aufgenommen
2021-04-26 #1
Initiale Fassung

References

Lenovo Security Bulletin
https://support.lenovo.com/de/de/product_security/ps500406-nvidia-gpu-display-driver-april-2021-security-bulletin
Nvidia Security Bulletin: April 2021 vom 2021-04-26
https://nvidia.custhelp.com/app/answers/detail/a_id/5172