Vulnerability Description
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Gpu Display Driver | < 11.13 |
| Citrix | Hypervisor | - |
| Redhat | Enterprise Linux Kernel-Based Virtual Machine | - |
| Vmware | Vsphere | - |
Related Weaknesses (CWE)
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5468Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5468Vendor Advisory
FAQ
What is CVE-2023-25517?
CVE-2023-25517 is a vulnerability with a CVSS score of 7.1 (HIGH). NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest OS may be able to control resources for which it is not authorized, which may lead to information...
How severe is CVE-2023-25517?
CVE-2023-25517 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-25517?
Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Gpu Display Driver, Citrix Hypervisor, Redhat Enterprise Linux Kernel-Based Virtual Machine, Vmware Vsphere.