CVE
CVE-2023-31029

9.3CRITICAL

Key Information:

Vendor

Nvidia
Status
Dgx A100
Vendor
CVE Published:
12 January 2024

What is CVE-2023-31029?

The NVIDIA DGX A100 baseboard management controller (BMC) is susceptible to a vulnerability found within the host KVM daemon. This vulnerability allows unauthenticated attackers to send specially crafted network packets, potentially causing a stack overflow. Exploiting this vulnerability may enable attackers to execute arbitrary code, trigger denial-of-service conditions, disclose sensitive information, or tamper with data integrity. Users of affected products should take appropriate measures to mitigate potential risks associated with this security issue.

Affected Version(s)

DGX A100 All BMC versions prior to 00.22.05

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5510

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.