Out-of-Bounds Write Vulnerability in NVIDIA DGX A100
CVE-2022-31602

6.4MEDIUM

Key Information:

Vendor
Nvidia
Status
Nvidia Dgx A100
Vendor
CVE Published:
4 July 2022

Summary

The NVIDIA DGX A100 features a vulnerability within its System BIOS (SBIOS) in the IpSecDxe module. This flaw permits a user with elevated privileges to exploit a preconditioned heap scenario, resulting in an out-of-bounds write condition. Exploiting this vulnerability could allow unauthorized code execution, lead to denial of service situations, compromise data integrity, and cause potential information disclosure.

Affected Version(s)

NVIDIA DGX A100 Versions prior to 22.5.5

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5367
x_refsource_MISC

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.