Memory corruption

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

Stack overflow

NVIDIA DGX A100 baseboard management controller BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial ...

Authentication flaw

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data...

Integer overflow

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-31031 CVE

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2023-31031 CVE

NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...

CVE-2023-31031

CVE-2023-31031 affects NVIDIA DGX Station A100 and DGX Station A800 SBIOS. Public documents describe a heap-based buffer overflow via local access, enabling possible code execution, denial of service, information disclosure, and data tampering . Exploitation details are not consistently provided ...

CVE-2023-31034

CVE-2023-31034 affects NVIDIA DGX Station A100/DGX Station A800 SBIOS as reported across multiple sources including Red Hat and NVIDIA bulletins. The issue is an integer overflow that allows a local attacker to bypass input validation checks, with potential impact including denial of service, inf...

CVE-2023-31034 CVE

NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

CVE-2023-31033 CVE

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data...

CVE-2023-31033

CVE-2023-31033 affects NVIDIA DGX A100 BMC. A user may cause a missing authentication issue for a critical function via an adjacent network, potentially enabling escalation of privileges, code execution, denial of service, information disclosure, and data tampering. CVSS metrics indicate ADJACENT...

CVE-2023-31033 CVE

NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data...

CVE-2023-31024 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31024 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31024

CVE-2023-31024 concerns the NVIDIA DGX A100 BMC host KVM daemon. All connected documents consistently describe an unauthenticated attacker sending a specially crafted network packet that can cause stack memory corruption, with possible arbitrary code execution, denial of service, information disc...

CVE-2023-31030 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31030 CVE

NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...

CVE-2023-31030

Summary: CVE-2023-31030 affects NVIDIA DGX A100 BMC, where a vulnerability in the host KVM daemon allows an unauthenticated attacker to trigger a stack overflow by sending a crafted network packet. This can lead to arbitrary code execution, denial of service, information disclosure, and data tamp...

CVE-2023-31029

CVE-2023-31029 affects NVIDIA DGX A100 BMC (host KVM daemon). An unauthenticated attacker can trigger a stack overflow by sending a crafted network packet, potentially enabling arbitrary code execution, denial of service, information disclosure, and data tampering. Multiple connected sources corr...

CVE-2023-31029 CVE

NVIDIA DGX A100 baseboard management controller BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial ...