CVE-2022-42286: Buffer Overflow
Published Jan 13, 2023
·Updated
DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges.
Affected Software
2 affected components
Nvidia SBIOS<1.18
Nvidia DGX A100
Event History
Jan 13, 2023
CVE Published
via MITRE·02:06 AM
Data Sourced
via MITRE·02:06 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is vulnerability CVE-2022-42286?
Vulnerability CVE-2022-42286 is a vulnerability found in the DGX A100 SBIOS, specifically in Bds, which may lead to code execution, denial of service, or escalation of privileges.
2
How severe is vulnerability CVE-2022-42286?
Vulnerability CVE-2022-42286 has a severity score of 7.8, which is considered high.
3
What software is affected by vulnerability CVE-2022-42286?
The affected software is the Nvidia Sbios version up to and excluding 1.18.
4
Is the NVIDIA DGX A100 vulnerable to CVE-2022-42286?
No, the NVIDIA DGX A100 is not vulnerable to CVE-2022-42286.
5
How can I fix vulnerability CVE-2022-42286?
To fix vulnerability CVE-2022-42286, it is recommended to update the Nvidia Sbios to a version higher than 1.18.