NVIDIA Data Center GPU Manager vulnerabilities

3 CVEs affecting NVIDIA Data Center GPU Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-0208, published 2023-04-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-21820, published 2022-03-24. Medium severity, CVSS 6.3. EPSS: 16.5% chance of exploitation in the next 30 days. NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service,…
CVE-2021-34398, published 2021-08-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead…
CVE-2023-0208, published 2023-04-01. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound socket. A successful exploit of this…