CVE-2022-31603

The CVE-2022-31603 entry affects NVIDIA DGX A100 firmware (SBIOS, IpSecDxe). The root cause is improper validation of an array index in IpSecDxe, leading to potential code execution, with possible denial of service, data integrity impact, and information disclosure. Publicly documented impact is ...

CVE-2022-31602

The CVE-2022-31602 issue affects NVIDIA DGX A100 firmware SBIOS (IpSecDxe). A local attacker with elevated privileges and a preconditioned heap can trigger an out-of-bounds write in IpSecDxe, leading to code execution, denial of service, data integrity impact, and information disclosure. Affected...

CVE-2022-31602

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure...

CVE-2022-31601

NVIDIA DGX A100 firmware vulnerability CVE-2022-31601 affects SBIOS in the SmbiosPei. A highly privileged local attacker may trigger an out-of-bounds write, potentially enabling code execution, denial of service, compromised integrity, and information disclosure. The issue is addressed in a NVIDI...

CVE-2022-31601

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

CVE-2022-31600

CVE-2022-31600 affects NVIDIA DGX A100 firmware SBIOS in the SmmCore. A highly privileged local user could chain this vulnerability to another, causing an integer overflow with potential for code execution, privilege escalation, DoS, and impacts to integrity and confidentiality; the scope may ext...

CVE-2022-31600

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and...

CVE-2022-31599

CVE-2022-31599 affects NVIDIA DGX A100 SBIOS in Ofbd. A local privileged user can cause an uninitialized pointer access, potentially enabling code execution, privilege escalation, DoS, and information disclosure, with impact potentially extending to other components. NVIDIA’s bulletin lists firmw...

CVE-2022-31599

NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to oth...

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

Design/Logic Flaw

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

CVE-2022-28200

CVE-2022-28200 affects NVIDIA DGX A100 firmware: a vulnerability in SBIOS/BiosCfgTool allows a local, elevated-privilege user to read/write beyond bounds in SMRAM, potentially enabling code execution, privilege escalation, DoS, and information disclosure. The NVIDIA advisory assigns a CVSSv3.1 ba...

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

NVIDIA NVFLARE 代码问题漏洞

NVIDIA NVFLARE is a standalone Python library from NVIDIA, Inc. Designed to support joint learning between parties using their local secure protected data for client-side training, it also includes functionality for coordinating and exchanging the progress of results across all sites to achieve...

NVIDIA NVFLARE 代码问题漏洞

NVIDIA NVFLARE is a standalone Python library from NVIDIA, Inc. Designed to support joint learning between parties using their local secure protected data for client-side training, it also includes functionality for coordinating and exchanging the progress of results across all sites to achieve...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...

ALSA-2022:5316 Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: buffer overflow in IPsec ESP transformation code CVE-2022-27666 kernel: out-of-bounds read in fbcongetfont function CVE-2020-28915 For more details about the security issues, including th...