CVE-2022-21820 Memory corruption in NVIDIA Data Center GPU Manager
A network user can trigger memory corruption in NVIDIA DCGM, leading to code execution, privilege escalation, and data compromise.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-21820?
CVE-2022-21820 is a medium-severity memory corruption vulnerability in NVIDIA Data Center GPU Manager, published on 24 Mar 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
NVIDIA DCGM contains a vulnerability in nvhostengine, where a network user can cause detection of error conditions without action, which may lead to limited code execution, some denial of service, escalation of privileges, and limited impacts to both data confidentiality and integrity.
Which versions are affected by CVE-2022-21820?
It affects 1 product.
Products include Nvidia Data Center Gpu Manager.
How do I fix CVE-2022-21820?
No fix has been published for CVE-2022-21820 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-21820 being exploited?
There is no known exploitation of CVE-2022-21820 in the wild and no public exploit code.
Other vulnerabilities in NVIDIA Data Center GPU Manager
Sources
Also known as GHSA-rqg9-g4fr-3cfj.