CVE-2023-31031

CVE-2023-31031 affects NVIDIA DGX Station A100 and DGX Station A800 SBIOS. Public documents describe a heap-based buffer overflow via local access, enabling possible code execution, denial of service, information disclosure, and data tampering . Exploitation details are not consistently provided ...

CVE-2023-31025 CVE

NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2023-31025 CVE

NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure...

CVE-2023-31025

CVE-2023-31025 affects the NVIDIA DGX A100 BMC. The connected documents describe an LDAP user injection vulnerability caused by insufficient handling of LDAP requests, with information disclosure as the stated impact. Publicly documented references vary on remediation status: NVIDIA’s security bu...

CVE-2023-31034

CVE-2023-31034 affects NVIDIA DGX Station A100/DGX Station A800 SBIOS as reported across multiple sources including Red Hat and NVIDIA bulletins. The issue is an integer overflow that allows a local attacker to bypass input validation checks, with potential impact including denial of service, inf...

CVE-2023-31034 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-31034 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-31033

CVE-2023-31033 affects NVIDIA DGX A100 BMC. A user may cause a missing authentication issue for a critical function via an adjacent network, potentially enabling escalation of privileges, code execution, denial of service, information disclosure, and data tampering. CVSS metrics indicate ADJACENT...

CVE-2023-31033 CVE

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data...

CVE-2023-31033 CVE

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data...

CVE-2023-31035

CVE-2023-31035 concerns the NVIDIA DGX A100 SBIOS. The vulnerability is a vulnerability in the SBIOS causing an SMI callout that could enable arbitrary code execution at the System Management Mode (SMM) level when triggered. The potential impacts listed are code execution, denial of service, priv...

CVE-2023-31035 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...

CVE-2023-31035 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and informatio...

CVE-2023-31032 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service...

CVE-2023-31032

CVE-2023-31032 affects NVIDIA DGX A100 SBIOS. Root cause: local access may trigger dynamic variable evaluation, leading to a denial of service. Affected SBIOS versions are prior to 10.20. Remediation: upgrade SBIOS firmware to 10.20 or later (DGX Servers: DGX Station A100/DGX Station A800 SBIOS)....

CVE-2023-31032 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service...

CVE-2023-31024 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31024 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31024

CVE-2023-31024 concerns the NVIDIA DGX A100 BMC host KVM daemon. All connected documents consistently describe an unauthenticated attacker sending a specially crafted network packet that can cause stack memory corruption, with possible arbitrary code execution, denial of service, information disc...

CVE-2023-31030 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...