CVE-2023-31034

CVE-2023-31034 affects NVIDIA DGX Station A100/DGX Station A800 SBIOS as reported across multiple sources including Red Hat and NVIDIA bulletins. The issue is an integer overflow that allows a local attacker to bypass input validation checks, with potential impact including denial of service, inf...

CVE-2023-31034 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-31033

CVE-2023-31033 affects NVIDIA DGX A100 BMC. A user may cause a missing authentication issue for a critical function via an adjacent network, potentially enabling escalation of privileges, code execution, denial of service, information disclosure, and data tampering. CVSS metrics indicate ADJACENT...

CVE-2023-31033 CVE

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data...

CVE-2023-31033 CVE

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data...

CVE-2023-31024

CVE-2023-31024 concerns the NVIDIA DGX A100 BMC host KVM daemon. All connected documents consistently describe an unauthenticated attacker sending a specially crafted network packet that can cause stack memory corruption, with possible arbitrary code execution, denial of service, information disc...

CVE-2023-31024 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31024 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31030

Summary: CVE-2023-31030 affects NVIDIA DGX A100 BMC, where a vulnerability in the host KVM daemon allows an unauthenticated attacker to trigger a stack overflow by sending a crafted network packet. This can lead to arbitrary code execution, denial of service, information disclosure, and data tamp...

CVE-2023-31030 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31030 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31029

CVE-2023-31029 affects NVIDIA DGX A100 BMC (host KVM daemon). An unauthenticated attacker can trigger a stack overflow by sending a crafted network packet, potentially enabling arbitrary code execution, denial of service, information disclosure, and data tampering. Multiple connected sources corr...

CVE-2023-31029 CVE

NVIDIA DGX A100 baseboard management controller BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial ...

CVE-2023-31029 CVE

NVIDIA DGX A100 baseboard management controller BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial ...

CVE-2023-31036

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lea...

Path traversal

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lea...

CVE-2023-31036

NVIDIA Triton Inference Server (Linux/Windows) is affected when started with the non-default --model-control explicit option. The model load API can trigger relative path traversal in this mode, potentially enabling code execution, DoS, privilege escalation, information disclosure, and data tampe...

CVE-2023-31036 CVE

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lea...

CVE-2023-31036 CVE

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lea...

SUSE CVE-2023-49344

Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present...