Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-42261

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where an input index is not validated, which may lead to buffer overrun, which in turn may cause data tampering, information disclosure, or denial of service.

Published

2022-12-30T23:15:11.167

Last Modified

2024-11-21T07:24:36.560

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-120
  • Type: Primary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nvidia virtual_gpu < 11.11 Yes
Application nvidia virtual_gpu < 13.6 Yes
Application nvidia virtual_gpu < 14.4 Yes
Operating System citrix hypervisor - No
Operating System linux linux_kernel - No
Operating System redhat enterprise_linux_kernel-based_virtual_machine - No
Operating System vmware vsphere - No
Application nvidia cloud_gaming < 525.60.12 Yes
Operating System citrix hypervisor - No
Operating System redhat enterprise_linux_kernel-based_virtual_machine - No
Application nvidia gpu_display_driver < 470.161.03 Yes
Application nvidia gpu_display_driver < 510.108.03 Yes
Application nvidia geforce - No
Application nvidia nvs - No
Application nvidia quadro - No
Application nvidia rtx - No
Application nvidia gpu_display_driver < 450.216.04 Yes
Application nvidia gpu_display_driver < 470.161.03 Yes
Application nvidia gpu_display_driver < 510.108.03 Yes
Application nvidia tesla - No
References