Lucene search

NvidiaCVELIST:CVE-2023-31034

HistoryJan 12, 2024 - 6:31 p.m.

CVE-2023-31034 CVE

2024-01-1218:31:41

CWE-190

nvidia

www.cve.org

nvidia dgx a100

sbios

integer overflow

denial of service

information disclosure

data tampering

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H

AI Score

8.2

Confidence

High

EPSS

Percentile

5.1%

JSON

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "DGX A100",
    "vendor": "nvidia",
    "versions": [
      {
        "status": "affected",
        "version": "All SBOIS versions prior to 1.25"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5510

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:H

AI Score

8.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-31034