CVE-2020-5988

EPSS 0.05%
Veröffentlicht 02.10.2020 21:15:13
Zuletzt bearbeitet 21.11.2024 05:34:57
Quelle psirt@nvidia.com
CVE-Watchlists
Login
Unerledigt
Login

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which allocated memory can be freed twice, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.5), version 10.x (prior to 10.4) and version 11.0.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Nvidia ≫ Virtual Gpu Manager Version >= 8.0 < 8.5

Nvidia ≫ Virtual Gpu Manager Version >= 10.0 < 10.4

Nvidia ≫ Virtual Gpu Manager Version11.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.05%	0.137

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.1	1.8	5.2	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
nvd@nist.gov	3.6	3.9	4.9	AV:L/AC:L/Au:N/C:P/I:N/A:P

CWE-415 Double Free

The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

https://nvidia.custhelp.com/app/answers/detail/a_id/5075

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2020-5988

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2020-5988

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2020-5988

EUVD