Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-0109

Опубликовано: 31 авг. 2024
Источник: debian

Описание

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
nvidia-cuda-toolkitunfixedpackage
nvidia-cuda-toolkitno-dsatrixiepackage
nvidia-cuda-toolkitno-dsabookwormpackage
nvidia-cuda-toolkitignoredbullseyepackage

Примечания

  • https://nvidia.custhelp.com/app/answers/detail/a_id/5564

Связанные уязвимости

CVSS3: 3.3
ubuntu
больше 1 года назад

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

CVSS3: 3.3
redhat
больше 1 года назад

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

CVSS3: 3.3
nvd
больше 1 года назад

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

CVSS3: 3.3
github
больше 1 года назад

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

CVSS3: 3.3
fstec
больше 1 года назад

Уязвимость утилиты cuobjdump программного средства для параллельных вычислений на графических процессорах NVIDIA CUDA Toolkit, позволяющая нарушителю вызвать отказ в обслуживании