PT-2023-16081 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue allows an attacker to modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit may lead to denial of service,...

PT-2023-20125 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Linux and Windows affected versions not specified Description: The issue is related to a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input...

PT-2023-6808 · Nvidia · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA Display Driver for Windows affected versions not specified Description: The issue is related to a driver vulnerability in NVIDIA Virtual GPU, which is caused by pointer dereference errors. An attacker may exploit this to cause a denial...

PT-2023-7241 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to an uncontrolled search path element in the NVIDIA GPU Display Driver for Windows during its update process. This can allow an attacker ...

PT-2023-20118 · Ami +1 · Ami Megarac Bmc +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 BMC affected versions not specified Description: The issue is related to a buffer overflow in the IPMI handler of the AMI MegaRAC BMC. An attacker with the appropriate level of authorization can cause this buffer overflow,...

PT-2023-16088 · Nvidia · Nvidia Dgx-1 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 SBIOS affected versions not specified Description: The issue is related to a missing authentication of the code executed by SSA in the Uncore PEI module, which may lead to arbitrary code execution, denial of service, escalation o...

NVIDIA DGX-1 缓冲区错误漏洞

NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX-1 Servers, which stems from an issue in Bds that could lead to code execution, denial of service, and power lifting...

PT-2023-16079 · Nvidia · Nvidia Dgx-2

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-2 affected versions not specified Description: The issue is related to a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffer's end. This may lead to code execution,...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS prior to version 1.18, which stems from an attacker being able to modify arbitrary memory in SMRAM by utilizing the NVME SMM API, which could resul...

PT-2023-16082 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX affected versions not specified Description: The issue is related to insufficient granularity of access control in the NIC firmware, which can be exploited by an unprivileged user to potentially...

PT-2023-20123 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA Toolkit SDK affected versions not specified Description: The issue is a NULL pointer dereference in cuobjdump. A local user running the tool against a malformed binary may cause a limited denial of service. Recommendations: At the...

PT-2023-20122 · Nvidia · Nvidia Dgx-1 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 SBIOS affected versions not specified Description: The issue is related to a vulnerability in Bds, which may lead to code execution, denial of service, and escalation of privileges. Recommendations: At the moment, there is no...

PT-2023-6809 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Windows and Linux affected versions not specified Description: The issue is related to a vulnerability in the Virtual GPU Manager vGPU plugin of the NVIDIA vGPU software, where a malicious user in the guest VM can cau...

NVIDIA DGX-1 授权问题漏洞

The NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in the NVIDIA DGX-1 SBIOS Uncore PEI prior to version 23.04.01, which stems from a lack of authentication of SSA execution code and could lead to arbitrary code...

PT-2023-8264 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue is related to an integer overflow that allows a local attacker to bypass input validation checks. A successful exploit may lead to denial of service, information...

NVIDIA ConnectX 安全漏洞

NVIDIA ConnectX is a series of intelligent network interface cards from NVIDIA Corporation. A security vulnerability exists in NVIDIA ConnectX versions prior to 35.1012, which originates from an unprivileged user that may result in mishandling of an exception, leading to a denial of service...

PT-2023-8257 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 BMC affected versions not specified Description: The issue is related to a vulnerability in the host KVM daemon of the NVIDIA DGX A100 BMC, where an unauthenticated attacker can cause stack memory corruption by sending a...

PT-2023-16068 · Nvidia +1 · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows and Linux affected versions not specified Description: The issue is related to a vulnerability in the kernel mode layer handler, which may lead to denial of service, escalation of privileges, information...

NVIDIA ConnectX 安全漏洞

NVIDIA ConnectX is a series of intelligent network interface cards from NVIDIA Corporation. A security vulnerability exists in versions prior to NVIDIA ConnectX 35.1012 that originates from an unprivileged user being able to exploit insufficient access control granularity, which could result in a...

PT-2023-6810 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software for Windows and Linux affected versions not specified Description: The issue is related to a NULL-pointer dereference in the Virtual GPU Manager vGPU plugin of the NVIDIA vGPU software, which can lead to denial of service...