CVE-2023-0208 — HIGH (8.4) — White Hats Nepal

Q: How severe is CVE-2023-0208?

CVE-2023-0208 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2023-0208?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Data Center Gpu Manager, Linux Linux Kernel.

Vulnerability Description

NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound socket. A successful exploit of this vulnerability may lead to denial of service and data tampering.

CVSS Score

8.4

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

NONE

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Nvidia	Data Center Gpu Manager	< 3.1.7
Linux	Linux Kernel	-

Related Weaknesses (CWE)

CWE-122 CWE-787

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5453Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5453Vendor Advisory

FAQ

What is CVE-2023-0208?

CVE-2023-0208 is a vulnerability with a CVSS score of 8.4 (HIGH). NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound socket. A successful exploit of this vulnerabilit...

How severe is CVE-2023-0208?

CVE-2023-0208 has been rated HIGH with a CVSS base score of 8.4/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-0208?

Check the references section above for vendor advisories and patch information. Affected products include: Nvidia Data Center Gpu Manager, Linux Linux Kernel.