CVE-2024-0110
published 2024-08-31CVE-2024-0110: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A…
PriorityP336high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.23%
14.3th percentile
NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-cuda-toolkit | — | — |
| nvidia | cuda_toolkit | <= 12.6.0 | — |
| nvidia | cuda_toolkit | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian4.4MEDIUM
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-379v-5xrg-g53f: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file
ghsa_unreviewed·2024-08-31
CVE-2024-0110 [MEDIUM] CWE-787 GHSA-379v-5xrg-g53f: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file
NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.
OSV
CVE-2024-0110: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file
osv·2024-08-31·CVSS 7.8
CVE-2024-0110 [HIGH] CVE-2024-0110: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file
NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.
Red Hat
NVIDIA CUDA Toolkit: code execution or denial of service in NVIDIA CUDA
vendor_redhat·2024-08-31·CVSS 4.4
CVE-2024-0110 [MEDIUM] CWE-787 NVIDIA CUDA Toolkit: code execution or denial of service in NVIDIA CUDA
NVIDIA CUDA Toolkit: code execution or denial of service in NVIDIA CUDA
NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.
A flaw was found in the NVIDIA CUDA Toolkit. Affected versions of this package contain a vulnerability in the `cuobjdump` command where a user may cause an out-of-bounds write by passing a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.
Statement: The issue is classified as moderate severity primarily because it is not typically exposed to untrusted inputs in most environments, limiting its exploitation potential.
M
Debian
CVE-2024-0110: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user...
vendor_debian·2024·CVSS 4.4
CVE-2024-0110 [MEDIUM] CVE-2024-0110: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user...
NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
No detection rules found.
No public exploits indexed.
2024-08-31
Published