CVE-2022-21820

CVE-2022-21820 affects NVIDIA Data Center GPU Manager (DCGM) specifically the nvhostengine component. The vulnerability arises from a hardware-daemon interaction where a network user can trigger error-condition handling without user action, potentially leading to limited code execution, some deni...

CVE-2023-0208

NVIDIA DCGM for Linux is affected by a heap-based buffer overflow in the HostEngine (server component) triggered by the bound socket. The issue can lead to denial of service and data tampering. NVIDIA’s security bulletin for CVE-2023-0208 states affected software includes DCGM for Linux, with all...

CVE-2021-34398

CVE-2021-34398 affects NVIDIA DCGM (all versions before 2.2.9) with a vulnerability in the DIAG module that allows a user to inject shared libraries into the DCGM server, which typically runs with root privileges. This can lead to privilege escalation, complete loss of confidentiality and integri...