CVE-2024-0115

2024-08-1213:38:12

CWE-400

[email protected]

web.nvd.nist.gov

nvidia

cv-cuda

ubuntu

jetpack

vulnerability

python apis

resource consumption

denial of service

data loss

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

EPSS

Percentile

9.5%

JSON

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.

Affected configurations

Nvd

Node

nvidiacv-cudaRange0.1.0–0.10.0jetpack

nvidiacv-cudaRange0.1.0–0.10.0ubuntu_20.04

nvidiacv-cudaRange0.1.0–0.10.0ubuntu_22.04

VendorProductVersionCPE
nvidiacv-cuda*cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:jetpack:*:*
nvidiacv-cuda*cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_20.04:*:*
nvidiacv-cuda*cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_22.04:*:*

Vendor	Product	Version	CPE
nvidia	cv-cuda	*	cpe:2.3:a:nvidia:cv-cuda::::::jetpack::*
nvidia	cv-cuda	*	cpe:2.3:a:nvidia:cv-cuda::::::ubuntu_20.04::*
nvidia	cv-cuda	*	cpe:2.3:a:nvidia:cv-cuda::::::ubuntu_22.04::*