CVE-2022-31603

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information...

CVE-2022-31603

The CVE-2022-31603 entry affects NVIDIA DGX A100 firmware (SBIOS, IpSecDxe). The root cause is improper validation of an array index in IpSecDxe, leading to potential code execution, with possible denial of service, data integrity impact, and information disclosure. Publicly documented impact is ...

CVE-2022-31602

The CVE-2022-31602 issue affects NVIDIA DGX A100 firmware SBIOS (IpSecDxe). A local attacker with elevated privileges and a preconditioned heap can trigger an out-of-bounds write in IpSecDxe, leading to code execution, denial of service, data integrity impact, and information disclosure. Affected...

CVE-2022-31602

NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure...

CVE-2022-31601

NVIDIA DGX A100 firmware vulnerability CVE-2022-31601 affects SBIOS in the SmbiosPei. A highly privileged local attacker may trigger an out-of-bounds write, potentially enabling code execution, denial of service, compromised integrity, and information disclosure. The issue is addressed in a NVIDI...

CVE-2022-31601

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

CVE-2022-31600

CVE-2022-31600 affects NVIDIA DGX A100 firmware SBIOS in the SmmCore. A highly privileged local user could chain this vulnerability to another, causing an integer overflow with potential for code execution, privilege escalation, DoS, and impacts to integrity and confidentiality; the scope may ext...

CVE-2022-31600

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and...

CVE-2022-31599

CVE-2022-31599 affects NVIDIA DGX A100 SBIOS in Ofbd. A local privileged user can cause an uninitialized pointer access, potentially enabling code execution, privilege escalation, DoS, and information disclosure, with impact potentially extending to other components. NVIDIA’s bulletin lists firmw...

CVE-2022-31599

NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to oth...

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

Design/Logic Flaw

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

CVE-2022-28200

CVE-2022-28200 affects NVIDIA DGX A100 firmware: a vulnerability in SBIOS/BiosCfgTool allows a local, elevated-privilege user to read/write beyond bounds in SMRAM, potentially enabling code execution, privilege escalation, DoS, and information disclosure. The NVIDIA advisory assigns a CVSSv3.1 ba...

CVE-2022-28200

NVIDIA DGX A100 contains a vulnerability in SBIOS in the BiosCfgTool, where a local user with elevated privileges can read and write beyond intended bounds in SMRAM, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can...

NVIDIA DGX 缓冲区错误漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. The NVIDIA DGX A100 suffers from a buffer error vulnerability that originates from a boundary error in the SBIOS in SmbiosPei. An attacker could exploit this vulnerability to trigger out-of-bounds writes and...

Security Bulletin: NVIDIA DGX A100 Firmware - June 2022

NVIDIA has released a security update for NVIDIA DGX A100 firmware. This update addresses issues that may lead to information disclosure, denial of service, or escalation of privileges. To protect your system, download and install this firmware update through the NVIDIA Enterprise Support Portal...