Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023
Search CVEs in bulletin 2023/5449 by description or CWE
Year: 2023 | Bulletin: 5449
Title: Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023
Updated: 2023-03-23T00:00:00Z
CVEs: 3
Search by CVE count, CVE description, or CWE.
Matching CVEs: 3
No matching CVEs found.
| Date | Scope | CVE / Details |
|---|---|---|
| 2023-03-23 | CWE-788 NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023 NVIDIA has released a firmware security update for the NVIDIA DGX-2™ server, DGX A100 server, and DGX Station A100. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, loss of data integrity, information disclosure, or data tampering.<div>To protect your system, download and install this firmware update through the <a href="https://nvid.nvidia.com/dashboard/">NVIDIA Enterprise Support Portal</a>.</div> | |
| 2023-03-23 | CWE-120 NVIDIA BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to denial of service or code execution. Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023 NVIDIA has released a firmware security update for the NVIDIA DGX-2™ server, DGX A100 server, and DGX Station A100. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, loss of data integrity, information disclosure, or data tampering.<div>To protect your system, download and install this firmware update through the <a href="https://nvid.nvidia.com/dashboard/">NVIDIA Enterprise Support Portal</a>.</div> | |
| 2023-03-23 | CWE-120 NVIDIA BMC contains a vulnerability in the IPMI handler, where an attacker with the required privileges can cause a buffer overflow, which may lead to denial of service or code execution. Security Bulletin: NVIDIA DGX-2, DGX Station A100, and DGX A100 - March 2023 NVIDIA has released a firmware security update for the NVIDIA DGX-2™ server, DGX A100 server, and DGX Station A100. This update addresses issues that may lead to code execution, denial of service, escalation of privileges, loss of data integrity, information disclosure, or data tampering.<div>To protect your system, download and install this firmware update through the <a href="https://nvid.nvidia.com/dashboard/">NVIDIA Enterprise Support Portal</a>.</div> |