Lucene search

GoogleOSV:CVE-2023-0208

HistoryApr 01, 2023 - 4:15 a.m.

CVE-2023-0208

2023-04-0104:15:08

Google

osv.dev

nvidia

dcgm

linux

vulnerability

heap-based buffer overflow

denial of service

data tampering

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound socket. A successful exploit of this vulnerability may lead to denial of service and data tampering.

CPENameOperatorVersion
dcgmeq3.0.4
dcgmeq2.3.4
dcgmeq3.1.6
dcgmeq2.4.7
dcgmeq2.1.4
dcgmeq3.1.3

Name	Operator	Version
dcgm	eq	3.0.4
dcgm	eq	2.3.4
dcgm	eq	3.1.6
dcgm	eq	2.4.7
dcgm	eq	2.1.4
dcgm	eq	3.1.3

References

nvidia.custhelp.com/app/answers/detail/a_id/5453

8.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Related for OSV:CVE-2023-0208