CVE-2023-25517

HIGH

7.1

Description

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering.

CVE Details

CVSS v3.1 Score7.1

SeverityHIGH

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published7/4/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

citrix:hypervisornvidia:gpu_display_driverredhat:enterprise_linux_kernel-based_virtual_machinevmware:vsphere

Weaknesses (CWE)

CWE-285

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5468(psirt@nvidia.com)

https://nvidia.custhelp.com/app/answers/detail/a_id/5468(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.