CVE-2023-0202

CVE-2023-0202 affects NVIDIA DGX A100 SBIOS. An attacker can modify arbitrary memory in SMRAM by abusing the GenericSio and LegacySmmSredir SMM APIs, potentially causing denial of service, privilege escalation, and information disclosure. The issue is acknowledged in NVIDIA’s March 2023 bulletin ...

CVE-2023-0202

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure...

CVE-2023-0201

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

CVE-2023-0201

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

CVE-2023-0201

CVE-2023-0201 affects NVIDIA DGX-2 SBIOS and is described as a vulnerability in Bds that allows a user with high privileges to cause a write beyond the bounds of an indexable resource, potentially enabling code execution, denial of service, integrity compromise, or information disclosure. The iss...

CVE-2023-0200

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure...

CVE-2023-0200

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure...

CVE-2023-0200

CVE-2023-0200 affects NVIDIA DGX-2 firmware (OFBD) where a user with high privileges and a pre-conditioned heap can cause an access beyond the end of a buffer, enabling code execution, privilege escalation, denial of service, or information disclosure. The issue is tied to a heap condition in OFB...

NVIDIA DGX-1 缓冲区错误漏洞

NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX-1 Servers, which stems from an issue in Bds that could lead to code execution, denial of service, and power lifting...

PT-2023-8260 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 BMC affected versions not specified Description: The issue is related to a stack overflow vulnerability in the host KVM daemon of the NVIDIA DGX A100 BMC. An unauthenticated attacker can exploit this by sending a specially...

PT-2023-20118 · Ami +1 · Ami Megarac Bmc +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 BMC affected versions not specified Description: The issue is related to a buffer overflow in the IPMI handler of the AMI MegaRAC BMC. An attacker with the appropriate level of authorization can cause this buffer overflow,...

PT-2023-16079 · Nvidia · Nvidia Dgx-2

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-2 affected versions not specified Description: The issue is related to a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffer's end. This may lead to code execution,...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS prior to version 1.18, which stems from an attacker being able to modify arbitrary memory in SMRAM by utilizing the NVME SMM API, which could resul...

PT-2023-8262 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue is related to incorrect dynamic variable analysis, which may allow a user to cause a dynamic variable evaluation by local access. A successful exploit of this issue...

PT-2023-16081 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue allows an attacker to modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit may lead to denial of service,...

PT-2023-16088 · Nvidia · Nvidia Dgx-1 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 SBIOS affected versions not specified Description: The issue is related to a missing authentication of the code executed by SSA in the Uncore PEI module, which may lead to arbitrary code execution, denial of service, escalation o...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS that originates from an attacker being able to modify arbitrary memory in SMRAM using the GenericSio and LegacySmmSredir SMM APIs, which could resu...

PT-2023-8257 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 BMC affected versions not specified Description: The issue is related to a vulnerability in the host KVM daemon of the NVIDIA DGX A100 BMC, where an unauthenticated attacker can cause stack memory corruption by sending a...

NVIDIA DGX-1 安全漏洞

NVIDIA DGX-1 is a personal computing device for deep learning applications from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX-1 Servers that originates from an attacker with the appropriate privilege level that could result in a buffer overflow, which could lead to a denial of...

PT-2023-20119 · Nvidia +1 · Nvidia Dgx-1 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 affected versions not specified Description: The issue is related to a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer. This...