CVE-2021-34398
- State
- Published
- Severity
- 7.8 High
- Published
- Aug 13, 2021
- Updated
- Aug 4, 2024
- Reserved
- Jun 9, 2021
Description
NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead to privilege escalation, total loss of confidentiality and integrity, and complete denial of service.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | nvidia |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
NVIDIA Data Center GPU Manager (DCGM)NVIDIA |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.