PT-2023-20134 · Nvidia · Nvidia Dgx A100 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100/A800 affected versions not specified Description: The issue is related to a weakness in SBIOS where proper input parameter validation is not performed, allowing an attacker to execute with unnecessary privileges. This can lead...

NVIDIA DGX 输入验证错误漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. The NVIDIA DGX A100/A800 suffers from an input validation error vulnerability that stems from incorrect input validation. An attacker could exploit this vulnerability to cause a denial of service, information...

PT-2023-20135 · Nvidia · Nvidia Dgx A800 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100/A800 affected versions not specified Description: The issue is related to improper input validation in SBIOS, where an attacker can provide configuration information in an unexpected format. This can lead to denial of service,...

NVIDIA vGPU Software 安全漏洞

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security...

NVIDIA CUDA toolkit 代码问题漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A code issue vulnerability exists in NVIDIA CUDA toolkit for Linux and Windows. An attacker could exploit this vulnerability to cause a NULL...

NVIDIA GPU Display Driver for Linux 输入验证错误漏洞

NVIDIA GPU Display Driver for Linux is a driver from NVIDIA Corporation that is used for interactive support of graphics card display modules in Linux systems. An input validation error vulnerability exists in NVIDIA GPU Display Driver for Linux. An attacker could exploit this vulnerability to...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX A100/A800. An attacker could exploit the vulnerability to cause a denial of service, information disclosure, and data tampering...

PT-2023-20136 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Linux and Windows affected versions not specified Description: The issue is related to a vulnerability in the nvdisasm binary file of the NVIDIA CUDA toolkit, where an attacker can cause a NULL pointer dereference by...

PT-2023-20129 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software affected versions not specified Description: The issue concerns a vulnerability in the Virtual GPU Manager vGPU plugin of NVIDIA vGPU software. This vulnerability allows a guest OS to control resources for which it is not...

Security Bulletin: NVIDIA DGX A100 and DGX A800 - June 2023

NVIDIA has released a firmware security update for the NVIDIA DGX™ A100 system and the NVIDIA DGX A800 system. This update addresses issues that may lead to code execution, denial of service, data tampering, escalation of privileges, and information disclosure. To protect your system, download an...

NVIDIA Windows GPU Display Driver (Jun 2023)

A display driver installed on the remote Windows host is affected by multiple vulnerabilities, as follows: - NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write, which may lead to code execution...

NVIDIA Linux GPU Display Driver (Jun 2023)

The NVIDIA GPU display driver software on the remote host is missing a security update. It is, therefore, affected by the following vulnerabilities: - NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical...

USN-6193-1: Linux kernel vulnerabilities

Hangyu Hua discovered that the Flower classifier implementation in the Linux kernel contained an out-of-bounds write vulnerability. An attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2023-35788, LP: 2023577 It was discovered that for some...

Security Bulletin: NVIDIA CUDA Toolkit - June 2023

NVIDIA has released a software update for NVIDIA® CUDA® Toolkit software. This update addresses security issues that may lead to partial denial of service. To protect your system, download and install this software update from the CUDA Toolkit Downloads page. Go to NVIDIA Product Security. Detail...

Vulnerabilities fixed in NVIDIA GPU products

Nvidia has fixed vulnerabilities in the drivers and control software of several GPUs. A malicious party could exploit vulnerabilities to launch attacks that can lead to the following categories of damage: Denial-of-Service DoS. Manipulation of data Remote code execution Administrator/Root...

Security Bulletin: NVIDIA GPU Display Driver - June 2023

NVIDIA has released a software security update for NVIDIA GPU Display Driver. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure. To protect your system, download and install this software update...

CVE-2023-25520

NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service...

CVE-2023-25515

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalation of privileges, data tampering, or information disclosure...

CVE-2023-25518

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of...

CVE-2023-25518

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of...