CVE-2023-25505: Buffer Overflow
NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler of the AMI MegaRAC BMC , where an attacker with the appropriate level of authorization can cause a buffer overflow, which may lead to denial of service, information disclosure, or arbitrary code execution.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this NVIDIA DGX-1 BMC vulnerability?
The vulnerability ID for this NVIDIA DGX-1 BMC vulnerability is CVE-2023-25505.
What is the severity level of CVE-2023-25505?
CVE-2023-25505 has a severity level of 7.8 (high).
What is the affected software in this vulnerability?
The affected software in this vulnerability is NVIDIA DGX-1 BMC with versions up to 3.39.30.
What can an attacker do with this vulnerability?
An attacker with the appropriate level of authorization can cause a buffer overflow, leading to denial of service, information disclosure, or arbitrary code execution.
How can I fix this vulnerability?
To fix this vulnerability, it is recommended to update the NVIDIA DGX-1 BMC to a version higher than 3.39.30.