CVE-2022-21820

Related Files

NVIDIA Data Center GPU Manager Remote Memory Corruption

Posted Jun 3, 2022

Authored by Jeremy Brown

NVIDIA DCGM runs on machines with NVIDIA GPUs to gather telemetry and GPU health data. nv-hostengine is a daemon that by default listens on the loopback interface, but can also listen on the network for requests coming in on port 5555 (remote mgmt). A native client named DCGMI allows users to make requests to the daemon to support a variety of functions. Malformed packets can cause the daemon (running as root or user account) to crash or potentially result in code execution. Versions less than 2.3.5 are affected.

tags | exploit, remote, root, code execution

advisories | CVE-2022-21820

SHA-256 | 2b77e249b980c3871a0f2ac4cb6decec29e1672c0858391ed0910b4b6867f9f3

Download | Favorite | View