What is CVE-2021-34398?

CVE-2021-34398 is a high-severity vulnerability in Nvidia Data_center_gpu_manager, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 7.8/10. Published 2021-08-13.

How severe is CVE-2021-34398?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Nvidia Data_center_gpu_manager

CVE-2021-34398

NVIDIA DCGM, all versions prior to 2.2.9, contains a vulnerability in the DIAG module where any user can inject shared libraries into the DCGM server, which is usually running as root, which may lead to privilege escalation, total loss of…

EPSS: 0.003 (17.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Nvidia Data_center_gpu_manager
Nvidia Data Center Gpu Manager (Dcgm) — versions DCGM versions prior to 2.2.9

Weakness classification (CWE)

CWE-829 — Inclusion of Functionality from Untrusted Control Sphere

References

psirt@nvidia.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-34398?: CVE-2021-34398 is a high-severity vulnerability in Nvidia Data_center_gpu_manager, classified under Inclusion of Functionality from Untrusted Control Sphere. CVSS score: 7.8/10. Published 2021-08-13.
How severe is CVE-2021-34398?: High severity. CVSS v3 base score is 7.8 out of 10.