CVE-2023-0201
published 2023-04-22CVE-2023-0201: NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may…
PriorityP428medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.20%
10.5th percentile
NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | zookeeper | >= 0 < 3.4.13-5ubuntu0.1 | 3.4.13-5ubuntu0.1 |
| apache | zookeeper | >= 0 < 3.4.13-6ubuntu4.1 | 3.4.13-6ubuntu4.1 |
| apache | zookeeper | >= 0 < 3.4.5+dfsg-1ubuntu0.1~esm3 | 3.4.5+dfsg-1ubuntu0.1~esm3 |
| apache | zookeeper | >= 0 < 3.4.8-1ubuntu0.1~esm2 | 3.4.8-1ubuntu0.1~esm2 |
| apache | zookeeper | >= 0 < 3.4.13-3ubuntu0.1~esm1 | 3.4.13-3ubuntu0.1~esm1 |
| nvidia | bmc | < 1.08.00 | 1.08.00 |
| nvidia | nvidia_dgx_servers | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
osv5.9MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
zookeeper vulnerabilities
osv·2024-01-16·CVSS 5.9
CVE-2019-0201 zookeeper vulnerabilities
zookeeper vulnerabilities
It was discovered that ZooKeeper incorrectly handled authorization for
the getACL() command. A remote attacker could possibly use this issue to
obtain sensitive information. This issue only affected Ubuntu 14.04
LTS and Ubuntu 16.04 LTS. (CVE-2019-0201)
Damien Diederen discovered that ZooKeeper incorrectly handled
authorization if SASL Quorum Peer authentication is enabled. An
attacker could possibly use this issue to bypass ZooKeeper's
authorization system. This issue only affected Ubuntu 18.04 LTS,
Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 23.04
and Ubuntu 23.10. (CVE-2023-44981)
GHSA
GHSA-vgw2-6rfv-rmx5: NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, wh
ghsa_unreviewed·2023-04-22
CVE-2023-0201 [MEDIUM] CWE-118 GHSA-vgw2-6rfv-rmx5: NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, wh
NVIDIA DGX-2 SBIOS contains a vulnerability in Bds, where a user with high privileges can cause a write beyond the bounds of an indexable resource, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-04-22
Published