CVE-2020-5987

Summary

CVE	CVE-2020-5987
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2020-10-02 21:15:00 UTC
Updated	2020-10-13 15:57:00 UTC
Description	NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin in which guest-supplied parameters remain writable by the guest after the plugin has validated them, which may lead to the guest being able to pass invalid parameters to plugin handlers, which may lead to denial of service or escalation of privileges. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

Risk And Classification

Problem Types: CWE-459

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Nvidia	Virtual Gpu Manager	All	All	All	All
Application	Nvidia	Virtual Gpu Manager	11.0	All	All	All
Application	Nvidia	Virtual Gpu Manager	All	All	All	All
Application	Nvidia	Virtual Gpu Manager	11.0	All	All	All

References

Reference	Source	Link	Tags
Security Bulletin: NVIDIA GPU Display Driver - September 2020 \| NVIDIA	CONFIRM	nvidia.custhelp.com	Vendor Advisory
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

375756 Lenovo NVIDIA GPU Display Driver Multiple Vulnerabilities (LEN-47663)