Lucene search

NvidiaCVE-2024-0115

HistoryAug 12, 2024 - 1:38 p.m.

CVE-2024-0115

2024-08-1213:38:12

CWE-400

nvidia

web.nvd.nist.gov

nvidia

cv-cuda

python

ubuntu

vulnerability

denial of service

data loss

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

9.5%

JSON

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.

Affected configurations

Nvd

Node

nvidiacv-cudaRange0.1.0–0.10.0jetpack

nvidiacv-cudaRange0.1.0–0.10.0ubuntu_20.04

nvidiacv-cudaRange0.1.0–0.10.0ubuntu_22.04

VendorProductVersionCPE
nvidiacv-cuda*cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:jetpack:*:*
nvidiacv-cuda*cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_20.04:*:*
nvidiacv-cuda*cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_22.04:*:*

Vendor	Product	Version	CPE
nvidia	cv-cuda	*	cpe:2.3:a:nvidia:cv-cuda::::::jetpack::*
nvidia	cv-cuda	*	cpe:2.3:a:nvidia:cv-cuda::::::ubuntu_20.04::*
nvidia	cv-cuda	*	cpe:2.3:a:nvidia:cv-cuda::::::ubuntu_22.04::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Ubuntu 20.04",
      "Ubuntu 22.04",
      "Jetpack"
    ],
    "product": "NVIDIA CV-CUDA",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "v0.1.x - v0.9.x"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5560

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

9.5%

JSON

Related for CVE-2024-0115