13480 matches found
NVIDIA DGX Security Vulnerability
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 Servers, which stems from an attacker could lead to an SMI markup vulnerability that could be used to execute arbitrary code at the SMM level...
NVIDIA DGX Security Vulnerability
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX A100 Servers, which stems from a flaw in the host KVM daemon that could allow an unauthenticated attacker to cause stack memory corruption by sending...
NVIDIA DGX Security Vulnerability
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in NVIDIA DGX A100 Servers, which stems from the possibility that a user may be able to cause dynamic variables to be evaluated via local access...
CVE-2023-31030: Stack-based Buffer Overflow
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information...
CVE-2023-31032: Dynamic Variable Evaluation
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service...
CVE-2023-31025: Improper Neutralization of Special Elements used in an LDAP Query
NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure...
CVE-2023-31036: Relative Path Traversal
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lea...
NVIDIA DGX Security Vulnerability
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA Corporation. A security vulnerability exists in NVIDIA DGX A100 Servers, which stems from a flaw in the host KVM daemon that could allow an unauthenticated attacker to cause a stack overflow by sending special...
NVIDIA DGX Buffer Error Vulnerability
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A buffer error vulnerability exists in NVIDIA DGX A100 Servers, which originates from a heap-based buffer overflow that could be caused by a user via local access...
CVE-2023-31034: Integer Overflow or Wraparound
NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...
CVE-2023-31031: Heap-based Buffer Overflow
NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering...
NVIDIA® GPU Display Driver October 2023 Security Update
NVIDIA has informed HP of potential security vulnerabilities identified in the NVIDIA® GPU Display Driver for Windows which may allow escalation of privilege, code execution, denial of service, or information disclosure. NVIDIA has released updates to mitigate these vulnerabilities. NVIDIA has...
NVIDIA DGX Security Vulnerability
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 Servers that originates from a user that could result in a loss of authentication for critical functions on neighboring networks...
Security Bulletin: NVIDIA DGX A100 - January 2024
NVIDIA has released a firmware security update for the NVIDIA DGX™ A100 system. To protect your system, download and install this firmware update through the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security...
British LAPSUS$ Teen Members Sentenced for High-Profile Attacks
Two British teens part of the LAPSUS$ cyber crime and extortion gang have been sentenced for their roles in orchestrating a string of high-profile attacks against a number of companies. Arion Kurtaj, an 18-year-old from Oxford, has been sentenced to an indefinite hospital order due to his intent ...
Security Bulletin: NVIDIA Triton Inference Server - December 2023
NVIDIA has released a software update for NVIDIA Triton Inference Server to address the issue disclosed in this bulletin. This issue affects only nondefault deployments that enable dynamic model loading through the model control APIs by using the command line option --model-control explicit...
USN-6534-3: Linux kernel vulnerabilities
It was discovered that the USB subsystem in the Linux kernel contained a race condition while handling device descriptors in certain situations, leading to a out-of-bounds read vulnerability. A local attacker could possibly use this to cause a denial of service system crash. CVE-2023-37453 Lin Ma...
Security Bulletin: Vulnerabilities affect NVIDIA GPU Display Drivers for Linux and Windows
Summary NVIDIA has released an update to address the following vulnerabilities in GPU Display Drivers for Linux and Windows. Vulnerability Details CVEID: CVE-2018-6260 DESCRIPTION: NVIDIA graphics driver could allow a local authenticated attacker to obtain sensitive information, caused by a flaw ...
SUSE-SU-2023:4651-1 Security update for webkit2gtk3
This update for webkit2gtk3 fixes the following issues: Update to version 2.42.2 bsc1217210: - CVE-2023-41983: Processing web content may lead to a denial-of-service. - CVE-2023-42852: Processing web content may lead to arbitrary code execution. Already previously fixed: - CVE-2022-32919: Visitin...
PT-2023-9633 · Nvidia · Nvidia Connectx Host Firmware
Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit DPU affected versions not specified Description: The issue is related to an improper handling of insufficient privileges, which may lead to denial of service, data tampering...