CVE-2021-34398 HIGH

CVE-2021-34398

Vendor Nvidia
Product NVIDIA Data Center GPU Manager (DCGM)
Published August 13, 2021
Last update August 4, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead to privilege escalation, total loss of confidentiality and integrity, and complete denial of service.

Key dates

02Disclosure timeline

August 13, 2021 CVE published
August 4, 2024 Record updated