CVE-2023-0196

2023-03-0202:15:41

Google

osv.dev

nvidia

cuda toolkit

cuobjdump

bug

null-pointer

denial of service

local user

ill-formed binary

3.3 Low

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service.

CPENameOperatorVersion
nvidia-cuda-toolkiteq10.2.89-5~bpo10+1
nvidia-cuda-toolkiteq10.1.168-3
nvidia-cuda-toolkiteq11.4.3-4
nvidia-cuda-toolkiteq12.1.0-2
nvidia-cuda-toolkiteq9.1.85-5
nvidia-cuda-toolkiteq4.2.9-2
nvidia-cuda-toolkiteq10.1.105-1
nvidia-cuda-toolkiteq11.1.1-4
nvidia-cuda-toolkiteq9.1.85-8~bpo9+1
nvidia-cuda-toolkiteq9.2.148-4

Name	Operator	Version
nvidia-cuda-toolkit	eq	10.2.89-5~bpo10+1
nvidia-cuda-toolkit	eq	10.1.168-3
nvidia-cuda-toolkit	eq	11.4.3-4
nvidia-cuda-toolkit	eq	12.1.0-2
nvidia-cuda-toolkit	eq	9.1.85-5
nvidia-cuda-toolkit	eq	4.2.9-2
nvidia-cuda-toolkit	eq	10.1.105-1
nvidia-cuda-toolkit	eq	11.1.1-4
nvidia-cuda-toolkit	eq	9.1.85-8~bpo9+1
nvidia-cuda-toolkit	eq	9.2.148-4