CVE-2023-0201
22.04.2023, 03:15
NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
| Vendor | Product | Version |
|---|---|---|
| nvidia | bmc | 𝑥 < 1.08.00 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-118 - Incorrect Access of Indexable Resource ('Range Error')The software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.