Lucene search

NvidiaVULNRICHMENT:CVE-2024-0087

HistoryMay 09, 2024 - 9:51 p.m.

CVE-2024-0087 CVE

2024-05-0921:51:35

CWE-73

nvidia

github.com

nvidia

triton inference

linux

vulnerability

code execution

denial of service

escalation of privileges

information disclosure

data tampering

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*"
    ],
    "vendor": "nvidia",
    "product": "triton_inference_server",
    "versions": [
      {
        "status": "affected",
        "version": "22.09",
        "versionType": "custom",
        "lessThanOrEqual": "24.03"
      }
    ],
    "defaultStatus": "unknown"
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5535

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H

AI Score

7.4

Confidence

High

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2024-0087