What is CVE-2020-5968?

CVE-2020-5968 is a high-severity vulnerability in NVIDIA Vgpu Software, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2020-06-30.

How severe is CVE-2020-5968?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in NVIDIA Vgpu Software

CVE-2020-5968

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which the software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed by using an index or pointer, such as memory or files, which may lead to code execution, denial of service, escalation of privileges, or information disclosure. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).

Vulnerability class: Buffer Overflow

EPSS: 0.004 (35.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nvidia Vgpu Software — versions All
Nvidia Virtual_gpu_manager

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-5968?: CVE-2020-5968 is a high-severity vulnerability in NVIDIA Vgpu Software, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.8/10. Published 2020-06-30.
How severe is CVE-2020-5968?: High severity. CVSS v3 base score is 7.8 out of 10.