VDB
CVE-2020-5973
CVE-2020-5973
PUBLISHED
CVSS 4.400000095367432 MEDIUM
NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).
EPSS 0.40% · 33.7th percentile
Risk Scores
CVSS 3.1
4.400000095367432
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.40%
33.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:20.04:LTS | nvidia-graphics-drivers-440 | 440.82-0ubuntu1, 440.64-0ubuntu3, 440.64-0ubuntu2 |
| Ubuntu:18.04:LTS | nvidia-graphics-drivers-390 | 390.116-0ubuntu0.18.04.3, 0, 390.25-0ubuntu3 |
| Ubuntu:18.04:LTS | nvidia-graphics-drivers-440 | 0, 440.59-0ubuntu0.18.04.1 |
| Ubuntu:20.04:LTS | nvidia-graphics-drivers-390 | 390.129-0ubuntu2, 390.132-0ubuntu2, 390.132-0ubuntu1 |
Timeline
- Jun 24, 2020 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 4, 2022 EPSS Score
- Sep 6, 2022 EPSS Score
References
- https://ubuntu.com/security/CVE-2020-5973 third-party-advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5031 third-party-advisory
- https://ubuntu.com/security/notices/USN-4404-1 vendor-advisory
- https://ubuntu.com/security/notices/USN-4404-2 vendor-advisory
- https://www.cve.org/CVERecord?id=CVE-2020-5973 third-party-advisory