CVE-2024-0115

Опубликовано: 12 авг. 2024

Источник: nvd

CVSS3: 6.1

EPSS Низкий

Описание

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.

Ссылки

https://nvidia.custhelp.com/app/answers/detail/a_id/5560
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:nvidia:cv-cuda:0.1.0:prealpha:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.2.0:alpha:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.2.1:alpha:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.3.0:beta:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.3.1:beta:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.4.0:beta:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.5.0:beta:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.6.0:beta:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.7.0:beta:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.8.0:beta:*:*:*:*:*:*

cpe:2.3:a:nvidia:cv-cuda:0.9.0:beta:*:*:*:*:*:*

Одно из

cpe:2.3:a:nvidia:jetpack_software_development_kit:-:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*

EPSS

Процентиль: 18%

0.00057

Низкий

6.1 Medium

CVSS3

Дефекты

CWE-400

NVD-CWE-noinfo

Связанные уязвимости

GHSA-x73h-483r-8x6h