CVE-2024-0109

CWE-125 — Out-of-bounds Read6 documents6 sources
Severity
3.3LOW
EPSS
0.0%
top 85.31%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Nvidia Cuda ToolkitNvidia Nvidia Cuda Toolkit
Timeline
PublishedAug 31

Description

NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:LExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5nvidia/nvidia_cuda_toolkitAll versions up to and including CUDA Toolkit 12.6

🔴Vulnerability Details

3
GHSA
GHSA-27f3-97pp-wv26: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file↗2024-08-31
▶
CVEList
CVE-2024-0109: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file↗2024-08-31
▶
OSV
CVE-2024-0109: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file↗2024-08-31
▶

📋Vendor Advisories

2
Red Hat
NVIDIA CUDA Toolkit: Denial of service in NVIDIA CUDA↗2024-08-31
▶
Debian
CVE-2024-0109: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user...↗2024
▶
CVE-2024-0109 (LOW CVSS 3.3) | NVIDIA CUDA Toolkit contains a vuln | cvebase.io