PT-2023-16079 · Nvidia · Nvidia Dgx-2

Published 2023-04-22 · Updated 2023-04-29 · CVE-2023-0200

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA DGX-2 (affected versions not specified)

Description The issue is related to a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffer's end. This may lead to code execution, escalation of privileges, denial of service, and information disclosure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Access of Memory Location After End of Buffer

Memory Corruption

Weakness Enumeration

CWE-788

CWE-787

Related Identifiers

CVE-2023-0200

Affected Products

Nvidia Dgx-2

References · 7

• https://nvidia.custhelp.com/app/answers/detail/a_id/5449 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0200 · Security Note
• https://osv.dev/vulnerability/CVE-2023-0200 · Vendor Advisory
• https://t.me/cvenotify/48944 · Telegram Post
• https://t.me/cvenotify/48890 · Telegram Post
• https://t.me/cibsecurity/62657 · Telegram Post
• https://t.me/cvenotify/49406 · Telegram Post