Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-25513

Опубликовано: 22 апр. 2023
Источник: nvd
CVSS3: 5.3
CVSS3: 6.6
EPSS Низкий

Описание

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*
Версия до 12.0.1 (исключая)

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 23%
0.00076
Низкий

5.3 Medium

CVSS3

6.6 Medium

CVSS3

Дефекты

CWE-125
CWE-125

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 3 года назад

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

CVSS3: 5.3
debian
почти 3 года назад

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in ...

CVSS3: 5.3
github
почти 3 года назад

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure.

EPSS

Процентиль: 23%
0.00076
Низкий

5.3 Medium

CVSS3

6.6 Medium

CVSS3

Дефекты

CWE-125
CWE-125