Skip to content
OpenAdvisories
Critical · 9.3 CVE-2023-31029 EUVD-2023-35366GHSA-qc42-9w9h-r7h5

CVE

Published Jan 12, 2024 · Updated Oct 25, 2024 · Assigned by nvidia

Description

NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.

Affected products

VendorProductAffectedFixed
nvidia DGX A100 All BMC versions prior to 00.22.05 —

References