CVE-2021-1066

MEDIUM

NVIDIA vGPU Manager 8.0-8.5 and 11.0 - Denial of Service via vGPU Plugin Input Validation

Title source: llm
STIX 2.1

Description

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3).

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://nvidia.custhelp.com/app/answers/detail/a_id/5142

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 19.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (1)
nvidia/virtual_gpu_manager 8.0 - 8.6
Published Jan 08, 2021
Tracked Since Feb 18, 2026