CVE-2024-0085

June 13, 2024, 10:15 p.m.

Received
CVE has been recently published to the CVE List and has been received by the NVD.

Products

NVIDIA vGPU software for Linux

NVIDIA vGPU software for Windows

Source

psirt@nvidia.com

Tags

CVE-2024-0085 details

Published : June 13, 2024, 10:15 p.m.
Last Modified : June 13, 2024, 10:15 p.m.

Description

NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service.

CVSS Score

1 2 3 4 5 6.3 7 8 9 10

Weakness

Weakness Name Description

CVSS Data

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

Base Score

6.3

Exploitability Score

Impact Score

Base Severity

MEDIUM

References

URL Source
https://nvidia.custhelp.com/app/answers/detail/a_id/5551 psirt@nvidia.com
This website uses the NVD API, but is not approved or certified by it.