CVE-2024-0093

NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
OR cpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:*
cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*
OR cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:45

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 5.5
v2 : unknown
v3 : 6.5
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Vendor Advisory () https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Vendor Advisory

15 Aug 2024, 22:23

Type Values Removed Values Added
CPE cpe:2.3:a:nvidia:cloud_gaming:*:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*
cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*
cpe:2.3:a:nvidia:virtual_gpu:*:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:-:*:*:*:*:*:*:*
cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*
First Time Redhat enterprise Linux Kernel-based Virtual Machine
Citrix
Redhat
Canonical ubuntu Linux
Vmware
Canonical
Citrix hypervisor
Nvidia cloud Gaming
Nvidia virtual Gpu
Nvidia
Vmware vsphere
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5551 - Vendor Advisory
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : 6.5
v2 : unknown
v3 : 5.5

17 Jun 2024, 12:43

Type Values Removed Values Added
Summary
  • (es) El software NVIDIA GPU para Linux contiene una vulnerabilidad que puede exponer información confidencial a un actor que no está autorizado explícitamente para tener acceso a esa información. Una explotación exitosa de esta vulnerabilidad podría dar lugar a la divulgación de información.

13 Jun 2024, 22:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-06-13 22:15

Updated : 2024-11-21 08:45


NVD link : CVE-2024-0093

Mitre link : CVE-2024-0093

CVE.ORG link : CVE-2024-0093


JSON object : View

Products Affected

canonical

  • ubuntu_linux

citrix

  • hypervisor

vmware

  • vsphere

nvidia

  • virtual_gpu
  • cloud_gaming

redhat

  • enterprise_linux_kernel-based_virtual_machine
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

NVD-CWE-noinfo