What is CVE-2020-5969?

CVE-2020-5969 is a medium-severity vulnerability in NVIDIA Vgpu Software, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.3/10. Published 2020-06-30.

How severe is CVE-2020-5969?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Vulnerability in NVIDIA Vgpu Software

CVE-2020-5969

NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, in which it validates a shared resource before using it, creating a race condition which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).

Vulnerability class: Race Condition

EPSS: 0.002 (10.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H.

Affected products

Nvidia Vgpu Software — versions All
Nvidia Virtual_gpu_manager

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

References

psirt@nvidia.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2020-5969?: CVE-2020-5969 is a medium-severity vulnerability in NVIDIA Vgpu Software, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 6.3/10. Published 2020-06-30.
How severe is CVE-2020-5969?: Medium severity. CVSS v3 base score is 6.3 out of 10.