Lucene search

K
nvd[email protected]NVD:CVE-2023-0193
HistoryMar 10, 2023 - 9:15 p.m.

CVE-2023-0193

2023-03-1021:15:14
CWE-125
web.nvd.nist.gov
nvidia
cuda
toolkit
sdk
cuobjdump
vulnerability
out-of-bounds read
denial of service
information disclosure

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosure.

Affected configurations

NVD
Node
nvidiacuda_toolkitRange<12.1
AND
linuxlinux_kernelMatch-
OR
microsoftwindowsMatch-

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

4.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%