CVEvulnerability

CVE-2022-21820

6.3 MEDIUM Published 2022-03-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 3.1 ([email protected])
6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-20, CWE-755, CWE-787

Description

NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.

Affected configurations

• nvidia data center gpu manager (< 2.3.5)

Related

Weakness · CWE (3)

  • CWE-20 Improper Input Validation weakness
  • CWE-755 Improper Handling of Exceptional Conditions weakness
  • CWE-787 Out-of-bounds Write weakness

Referenced by CWE · observed example (1)

  • CWE-390 Detection of Error Condition Without Action weakness

References