NVIDIA NvContainer Service OpenSSL Vulnerability Allowing Code Execution and Privilege Escalation

A vulnerability exists in the NVIDIA NvContainer service for Windows due to improper handling of OpenSSL. An attacker could exploit this by placing a malicious DLL in a predetermined location. Successful exploitation could result in unauthorized code execution, denial of service, elevated privileges, unauthorized information access, or data manipulation.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution, denial of service, privilege escalation, information disclosure, or data tampering.

Remediation

Users are advised to update to version 11.0.2.337 (prod2 hotfix) of the NVIDIA App. Earlier versions are also affected.