CVE-2023-31032
12.01.2024, 19:15
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service.Enginsight
| Vendor | Product | Version |
|---|---|---|
| nvidia | dgx_a100_firmware | 𝑥 < 1.25 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-627 - Dynamic Variable EvaluationIn a language where the user can influence the name of a variable at runtime, if the variable names are not controlled, an attacker can read or write to arbitrary variables, or access arbitrary functions.
- CWE-913 - Improper Control of Dynamically-Managed Code ResourcesThe software does not properly restrict reading from or writing to dynamically-managed code resources such as variables, objects, classes, attributes, functions, or executable instructions or statements.