Integer Overflow Vulnerability in NVIDIA DGX A100 Product
CVE-2022-31600

7.5HIGH

Key Information:

Vendor

Nvidia
Status
Nvidia Dgx A100
Vendor
CVE Published:
4 July 2022

What is CVE-2022-31600?

The NVIDIA DGX A100 product is affected by an integer overflow vulnerability within the SBIOS SmmCore. Users with elevated privileges can exploit this vulnerability by chaining it with another security flaw, potentially leading to serious consequences such as code execution, privilege escalation, denial of service, and compromised integrity. Additionally, the impact may extend beyond the initial component, affecting other system components and data integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

NVIDIA DGX A100 Versions prior to 22.5.5

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5367
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.