Vulnerability Details : CVE-2020-5973
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
Vulnerability category: Denial of service
Products affected by CVE-2020-5973
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
- cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
- cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
- cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-5973
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 15 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-5973
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
2.1
|
LOW | AV:L/AC:L/Au:N/C:N/I:N/A:P |
3.9
|
2.9
|
NIST | |
|
4.4
|
MEDIUM | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
0.8
|
3.6
|
NIST |
References for CVE-2020-5973
-
https://nvidia.custhelp.com/app/answers/detail/a_id/5031
Security Bulletin: NVIDIA GPU Display Driver - June 2020 | NVIDIAVendor Advisory
-
https://usn.ubuntu.com/4404-1/
USN-4404-1: NVIDIA graphics drivers vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
https://usn.ubuntu.com/4404-2/
USN-4404-2: Linux kernel vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
Jump to