Integer Overflow Vulnerability in NVIDIA DGX A100 Product
CVE-2022-31600

7.5HIGH

Key Information:

Vendor
Nvidia
Status
Nvidia Dgx A100
Vendor
CVE Published:
4 July 2022

Summary

The NVIDIA DGX A100 product is affected by an integer overflow vulnerability within the SBIOS SmmCore. Users with elevated privileges can exploit this vulnerability by chaining it with another security flaw, potentially leading to serious consequences such as code execution, privilege escalation, denial of service, and compromised integrity. Additionally, the impact may extend beyond the initial component, affecting other system components and data integrity.

Affected Version(s)

NVIDIA DGX A100 Versions prior to 22.5.5

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5367
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.