Input validation

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

Design/Logic Flaw

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information...

CVE-2023-25534

Summary: CVE-2023-25534 affects the NVIDIA DGX H100 BMC via an IPMI input-validation vulnerability. The Red Hat and NVIDIA advisories describe an improper input validation flaw in IPMI that could enable an attacker to achieve code execution, denial of service, privilege escalation, information di...

CVE-2023-25534

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2023-25534

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...

CVE-2023-25529

NVIDIA DGX H100 BMC and DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a leak of another user’s session token by observing timing discrepancies between server responses. A successful exploit of this vulnerability may lead to information...

CVE-2023-25529

The CVE-2023-25529 vulnerability affects NVIDIA DGX H100 BMC and DGX A100 BMC, in the host KVM daemon, allowing an unauthenticated attacker to observe timing differences and leak another user’s session token. Reported impact includes information disclosure, privilege escalation, and data tamperin...

CVE-2023-25528

NVIDIA DGX H100 baseboard management controller BMC contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial ...

CVE-2023-25528

CVE-2023-25528 affects the NVIDIA DGX H100 baseboard management controller (BMC) web server plugin. An unauthenticated attacker can trigger a stack overflow by sending a specially crafted network packet, potentially leading to arbitrary code execution, denial of service, information disclosure, a...

CVE-2023-25528

NVIDIA DGX H100 baseboard management controller BMC contains a vulnerability in a web server plugin, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial ...

CVE-2023-25527

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information...

CVE-2023-25527

NVIDIA DGX H100 BMC contains a vulnerability in the host KVM daemon, where an authenticated local attacker may cause corruption of kernel memory. A successful exploit of this vulnerability may lead to arbitrary kernel code execution, denial of service, escalation of privileges, information...

CVE-2023-25527

CVE-2023-25527 affects NVIDIA DGX H100 BMC’s host KVM daemon. A authenticated local attacker can corrupt kernel memory, enabling arbitrary kernel code execution, DoS, privilege escalation, information disclosure, and data tampering. Affected product/component: DGX H100 BMC KVM daemon. Root cause:...

PT-2023-20139 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified NVIDIA DGX A100 BMC affected versions not specified Description: The vulnerability is located in the host KVM daemon of the NVIDIA DGX H100 BMC and DGX A100 BMC, where an unauthenticated...

PT-2023-20145 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 BMC affected versions not specified Description: The issue is related to improper input validation in IPMI, which can be exploited by an attacker to cause code execution, denial of service, escalation of privileges, informatio...

NVIDIA DGX Buffer Error Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX H100. An attacker could exploit the vulnerability to cause arbitrary code execution, denial of service, information disclosure, and data tampering...

NVIDIA DGX Buffer Error Vulnerability

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A buffer error vulnerability exists in the NVIDIA DGX H100 BMC. An attacker could exploit this vulnerability to cause arbitrary kernel code execution, denial of service, privilege escalation, information...

PT-2023-20138 · Nvidia · Nvidia Dgx A100

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX H100 baseboard management controller BMC affected versions not specified Description: The NVIDIA DGX H100 baseboard management controller BMC contains a vulnerability in a web server plugin. An unauthenticated attacker may cause a...

NVIDIA Virtual GPU Manager Multiple Vulnerabilities (November 2022)

The NVIDIA Virtual GPU Manager software on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged regular...

The vulnerability of the NPort IAW5000A-I/O Series web server software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the NPort IAW5000A-I/O Series web server software is related to the presence of a hard-coded key, which could potentially facilitate manipulation of the firmware. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and...