Lucene search

K
ubuntucveUbuntu.comUB:CVE-2023-25512
HistoryApr 22, 2023 - 12:00 a.m.

CVE-2023-25512

2023-04-2200:00:00
ubuntu.com
ubuntu.com
5
cve-2023-25512
nvidia
cuda toolkit
cuobjdump
vulnerability
out-of-bounds
memory read
exploit
denial of service
code execution
information disclosure
linux
windows

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

0.0005 Low

EPSS

Percentile

16.2%

NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in
cuobjdump, where an attacker may cause an out-of-bounds memory read by
running cuobjdump on a malformed input file. A successful exploit of this
vulnerability may lead to limited denial of service, code execution, and
limited information disclosure.

6.6 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L

0.0005 Low

EPSS

Percentile

16.2%