Ubuntu: Security Advisory (USN-6466-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

USN-6466-1: Linux kernel (NVIDIA) vulnerabilities

Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free vulnerability. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code...

Ubuntu 22.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-6466-1)

The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6466-1 advisory. Hyunwoo Kim discovered that the DVB Core driver in the Linux kernel contained a race condition during device removal, leading to a use-after- free...

Security Bulletin: NVIDIA GPU Display Driver - October 2023

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: prometheus-adapter-fips, smarter-device-manager-fips, metrics-server-fips, conftest-fips, kubernetes-csi-livenessprobe-fips, prometheus-stackdriver-exporter, kubevela, volume-modifier-for-k8s-fips, prometheus-blackbox-exporter, timestamp-authority-fips, slsa-verifier...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: cortex, slsa-verifier, kubeflow, buildkitd, terraform-provider-sendgrid, src, kubescape, dgraph, up, spark-operator, k3d, kubevela, scorecard, aactl...

GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: prometheus-mysqld-exporter, kpt, azure-aad-pod-identity-mic, metrics-server-fips, dive, flux-notification-controller, prometheus-adapter, atlantis-fips, pulumi-language-dotnet, node-problem-detector, configmap-reload-fips, apko, k8sgpt, crossplane-provider-azure,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kind, certificate-transparency, aws-efs-csi-driver, minio, nginx-stable, dex, ko, k3d, aactl, helm, gobuster, gitness, src, weaviate, memcached-exporter, terraform, scorecard, pulumi-language-dotnet, envoy-ratelimit, oauth2-proxy, secrets-store-csi-driver-provider-gc...

The vulnerability of NVIDIA GPU software driver allows a hacker to trigger a service failure or enhance their privileges.

The vulnerability of NVIDIA GPU graphics driver involves the use of an unreliable pointer. Exploiting this vulnerability can allow attackers to cause system failures or gain increased privileges...

NVIDIA Drivers: Multiple Vulnerabilities

Background NVIDIA Drivers are NVIDIA's accelerated graphics driver. Description Multiple vulnerabilities have been discovered in NVIDIA Drivers. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no...

GLSA-202310-02 : NVIDIA Drivers: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202310-02 NVIDIA Drivers: Multiple Vulnerabilities - NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape or IOCTL in which user-mo...

The vulnerability of the Host KVM Daemon of the BMC – the Baseboard Management Controller – in NVIDIA DGX H100 BMC allows a hacker to execute arbitrary code, cause system failures, or gain increased privileges.

The vulnerability of the NVIDIA DGX H100 BMC’s KVM daemon controller for equipment management involves an escape from the buffer boundaries into memory. Exploiting this vulnerability allows a attacker to execute arbitrary code, cause system failures, or gain increased privileges...

The vulnerability of the neighmgrd and nlmanager components of the NVIDIA Cumulus Linux network operating system allows a hacker to trigger a service failure.

The vulnerability of the neighmgrd and nlmanager components of the NVIDIA Cumulus Linux network operating system is related to an exception handling error. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

CVE-2023-31015

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service...

CVE-2023-31015

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service...

CVE-2023-31014

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

CVE-2023-31013

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure...

CVE-2023-31014

NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial ...

CVE-2023-31013

NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure...

CVE-2023-31012

NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure...