PT-2023-16080 · Nvidia · Nvidia Dgx-2 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-2 SBIOS affected versions not specified Description: The issue is related to a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource. This may lead to code execution,...

PT-2023-20123 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA Toolkit SDK affected versions not specified Description: The issue is a NULL pointer dereference in cuobjdump. A local user running the tool against a malformed binary may cause a limited denial of service. Recommendations: At the...

PT-2023-16081 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue allows an attacker to modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit may lead to denial of service,...

PT-2023-20126 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Linux and Windows affected versions not specified Description: The issue is related to a vulnerability in cuobjdump, where an attacker can cause an out-of-bounds read by tricking a user into running cuobjdump on a...

PT-2023-16084 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5 affected versions not specified NVIDIA ConnectX-6 affected versions not specified NVIDIA ConnectX6-DX affected versions not specified Description: The issue is related to insufficient granularity of access control in the NIC...

PT-2023-20125 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Linux and Windows affected versions not specified Description: The issue is related to a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input...

PT-2023-16083 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX affected versions not specified Description: The issue is related to improper handling of exceptional conditions in the NIC firmware, which may lead to denial of service. An unprivileged user ca...

PT-2023-16082 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX affected versions not specified Description: The issue is related to insufficient granularity of access control in the NIC firmware, which can be exploited by an unprivileged user to potentially...

CVE-2023-0207: Incorrect Permission Assignment for Critical Resource

NVIDIA DGX-2 SBIOS contains a vulnerability where an attacker may modify the ServerSetup NVRAM variable at runtime by executing privileged code. A successful exploit of this vulnerability may lead to denial of service...

CVE-2023-0205: Insufficient Granularity of Access Control

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...

CVE-2023-0202: Improper Restriction of Operations within the Bounds of a Memory Buffer

NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may modify arbitrary memory of SMRAM by exploiting the GenericSio and LegacySmmSredir SMM APIs. A successful exploit of this vulnerability may lead to denial of service, escalation of privileges, and information disclosure...

CVE-2023-0201: Incorrect Access of Indexable Resource

NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure...

CVE-2023-25514: Out-of-bounds Read

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution,...

CVE-2023-25511: Divide By Zero

NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may lead to a limited denial of service...

CVE-2023-25508: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authorization can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure, and data tamperi...

PT-2023-8263 · Nvidia · Nvidia Dgx H100 Bmc

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 BMC affected versions not specified Description: The issue is related to a missing authentication problem for a critical function in the NVIDIA DGX A100 BMC, which can be exploited by an adjacent network. A successful exploit...

NVIDIA CUDA Toolkit 代码问题漏洞

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. The software supports the development, optimization and deployment of applications installed on GPU-accelerated embedded systems, desktop workstations, enterprise data...

CVE-2023-25507: Improper Neutralization of Special Elements used in an OS Command

NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering...

PT-2023-6808 · Nvidia · Nvidia Gpu Display Driver +1

Name of the Vulnerable Software and Affected Versions: NVIDIA Display Driver for Windows affected versions not specified Description: The issue is related to a driver vulnerability in NVIDIA Virtual GPU, which is caused by pointer dereference errors. An attacker may exploit this to cause a denial...

PT-2023-20119 · Nvidia +1 · Nvidia Dgx-1 +1

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-1 affected versions not specified Description: The issue is related to a vulnerability in Ofbd in AMI SBIOS, where a preconditioned heap can allow a user with elevated privileges to cause an access beyond the end of a buffer. This...