CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-25522

CVE-2023-25522 affects NVIDIA DGX A100/A800 SBIOS prior to version 1.21. The issue: improper input validation when configuration information is provided in an unexpected format, which may allow an attacker with local access to cause denial of service, information disclosure, and data tampering. N...

CVE-2023-25521

CVE-2023-25521 affects NVIDIA DGX A100/A800 SBIOS. Root cause: improper input parameter validation in SBIOS, enabling execution with elevated privileges. Impacts: code execution, privilege escalation, denial of service, information disclosure, and data tampering. Remediation: update SBIOS to firm...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

CVE-2023-25517

NVIDIA vGPU software (Virtual GPU Manager, vGPU plugin) is affected by CVE-2023-25517, where a guest OS may control resources it is not authorized to access, potentially leading to information disclosure and data tampering. Affected product is NVIDIA vGPU software; the root cause is improper acce...

CVE-2023-25517

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering...

CVE-2023-25517

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering...

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

CVE-2023-25516

The CVE-2023-25516 issue affects NVIDIA GPU Display Driver for Linux, specifically in the kernel mode layer. An unprivileged user can trigger an integer overflow, which may result in information disclosure and denial of service. The description across sources consistently identifies a kernel-spac...

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

PT-2023-20134 · Nvidia · Nvidia Dgx A100 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100/A800 affected versions not specified Description: The issue is related to a weakness in SBIOS where proper input parameter validation is not performed, allowing an attacker to execute with unnecessary privileges. This can lead...

NVIDIA DGX 输入验证错误漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. The NVIDIA DGX A100/A800 suffers from an input validation error vulnerability that stems from incorrect input validation. An attacker could exploit this vulnerability to cause a denial of service, information...

PT-2023-20135 · Nvidia · Nvidia Dgx A800 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100/A800 affected versions not specified Description: The issue is related to improper input validation in SBIOS, where an attacker can provide configuration information in an unexpected format. This can lead to denial of service,...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX A100/A800. An attacker could exploit the vulnerability to cause a denial of service, information disclosure, and data tampering...

NVIDIA CUDA toolkit 代码问题漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A code issue vulnerability exists in NVIDIA CUDA toolkit for Linux and Windows. An attacker could exploit this vulnerability to cause a NULL...

NVIDIA vGPU Software 安全漏洞

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security...

NVIDIA GPU Display Driver for Linux 输入验证错误漏洞

NVIDIA GPU Display Driver for Linux is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in Linux systems. An input validation error vulnerability exists in NVIDIA GPU Display Driver for Linux. An attacker could exploit this vulnerability to...

PT-2023-20136 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Linux and Windows affected versions not specified Description: The issue is related to a vulnerability in the nvdisasm binary file of the NVIDIA CUDA toolkit, where an attacker can cause a NULL pointer dereference by...