UBUNTU-CVE-2020-5973

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2020-5973
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-5973.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2020-5973
Upstream
Downstream
Related
Published
2020-06-24T00:00:00Z
Modified
2026-02-04T03:13:03.755731Z
Severity
  • 4.4 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
  • Ubuntu - medium
Summary
[none]
Details

NVIDIA Virtual GPU Manager and the guest drivers contain a vulnerability in vGPU plugin, in which there is the potential to execute privileged operations, which may lead to denial of service. This affects vGPU version 8.x (prior to 8.4), version 9.x (prior to 9.4) and version 10.x (prior to 10.3).

References

Affected packages

Ubuntu:18.04:LTS
nvidia-graphics-drivers-390

Package

Name
nvidia-graphics-drivers-390
Purl
pkg:deb/ubuntu/nvidia-graphics-drivers-390@390.138-0ubuntu0.18.04.1?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
390.138-0ubuntu0.18.04.1

Affected versions

390.*
390.25-0ubuntu1
390.25-0ubuntu3
390.25-0ubuntu4
390.42-0ubuntu1
390.48-0ubuntu1
390.48-0ubuntu2
390.48-0ubuntu3
390.77-0ubuntu0.18.04.1
390.77-0ubuntu0.18.04.2
390.116-0ubuntu0.18.04.1
390.116-0ubuntu0.18.04.3
390.132-0ubuntu0.18.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libcuda1-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-cfg1-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-common-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-compute-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-decode-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-encode-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-fbc1-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-gl-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-ifr1-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-384-dev"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-compute-utils-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-dkms-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-driver-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-headless-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-headless-no-dkms-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-kernel-common-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-kernel-source-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-libopencl1-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-opencl-icd-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "nvidia-utils-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.18.04.1",
            "binary_name": "xserver-xorg-video-nvidia-390"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-5973.json"
nvidia-graphics-drivers-440

Package

Name
nvidia-graphics-drivers-440
Purl
pkg:deb/ubuntu/nvidia-graphics-drivers-440@440.100-0ubuntu0.18.04.1?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
440.100-0ubuntu0.18.04.1

Affected versions

440.*
440.59-0ubuntu0.18.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-cfg1-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-cfg1-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-common-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-common-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-compute-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-compute-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-decode-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-decode-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-encode-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-encode-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-extra-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-fbc1-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-fbc1-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-gl-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-gl-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-ifr1-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "libnvidia-ifr1-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-compute-utils-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-compute-utils-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-dkms-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-dkms-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-driver-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-driver-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-headless-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-headless-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-headless-no-dkms-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-headless-no-dkms-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-kernel-common-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-kernel-common-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-kernel-source-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-kernel-source-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-utils-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "nvidia-utils-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "xserver-xorg-video-nvidia-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.18.04.1",
            "binary_name": "xserver-xorg-video-nvidia-440"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-5973.json"
Ubuntu:20.04:LTS
nvidia-graphics-drivers-390

Package

Name
nvidia-graphics-drivers-390
Purl
pkg:deb/ubuntu/nvidia-graphics-drivers-390@390.138-0ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
390.138-0ubuntu0.20.04.1

Affected versions

390.*
390.129-0ubuntu2
390.132-0ubuntu1
390.132-0ubuntu2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libcuda1-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-cfg1-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-common-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-compute-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-decode-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-encode-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-fbc1-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-gl-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-ifr1-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-384-dev"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-compute-utils-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-dkms-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-driver-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-headless-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-headless-no-dkms-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-kernel-common-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-kernel-source-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-libopencl1-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-opencl-icd-384"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "nvidia-utils-390"
        },
        {
            "binary_version": "390.138-0ubuntu0.20.04.1",
            "binary_name": "xserver-xorg-video-nvidia-390"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-5973.json"
nvidia-graphics-drivers-440

Package

Name
nvidia-graphics-drivers-440
Purl
pkg:deb/ubuntu/nvidia-graphics-drivers-440@440.100-0ubuntu0.20.04.1?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
440.100-0ubuntu0.20.04.1

Affected versions

440.*
440.31-0ubuntu1
440.36-0ubuntu1
440.44-0ubuntu1
440.44-0ubuntu2
440.59-0ubuntu1
440.59-0ubuntu2
440.64-0ubuntu1
440.64-0ubuntu2
440.64-0ubuntu3
440.82-0ubuntu1
440.82+really.440.64-0ubuntu4
440.82+really.440.64-0ubuntu5
440.82+really.440.64-0ubuntu6

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-cfg1-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-cfg1-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-common-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-common-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-compute-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-compute-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-decode-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-decode-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-encode-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-encode-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-extra-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-fbc1-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-fbc1-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-gl-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-gl-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-ifr1-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "libnvidia-ifr1-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-compute-utils-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-compute-utils-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-dkms-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-dkms-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-driver-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-driver-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-headless-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-headless-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-headless-no-dkms-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-headless-no-dkms-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-kernel-common-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-kernel-common-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-kernel-source-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-kernel-source-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-utils-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "nvidia-utils-440"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "xserver-xorg-video-nvidia-430"
        },
        {
            "binary_version": "440.100-0ubuntu0.20.04.1",
            "binary_name": "xserver-xorg-video-nvidia-440"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-5973.json"