CVE-2024-0111
published 2024-08-31CVE-2024-0111: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file…
PriorityP414medium4.4CVSS 3.1
AVLACLPRNUIRSUCNILAL
EPSS
0.20%
10.1th percentile
NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | nvidia-cuda-toolkit | — | — |
| nvidia | cuda_toolkit | <= 12.6.0 | — |
| nvidia | cuda_toolkit | — | — |
CVSS provenance
nvdv3.14.4MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
osv4.4MEDIUM
vendor_debian4.4MEDIUM
vendor_redhat4.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
NVIDIA CUDA Toolkit: Denial of service in NVIDIA CUDA
vendor_redhat·2024-08-31·CVSS 4.4
CVE-2024-0111 [MEDIUM] CWE-1284 NVIDIA CUDA Toolkit: Denial of service in NVIDIA CUDA
NVIDIA CUDA Toolkit: Denial of service in NVIDIA CUDA
NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.
A flaw was found in the NVIDIA CUDA Toolkit. Affected versions of this package contain a vulnerability in the 'cuobjdump' command where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.
Mitigation: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising
Debian
CVE-2024-0111: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user...
vendor_debian·2024·CVSS 4.4
CVE-2024-0111 [MEDIUM] CVE-2024-0111: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user...
NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
GHSA
GHSA-qccm-7jq2-92v7: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed
ghsa_unreviewed·2024-08-31
CVE-2024-0111 [MEDIUM] CWE-1284 GHSA-qccm-7jq2-92v7: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed
NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.
OSV
CVE-2024-0111: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed
osv·2024-08-31·CVSS 4.4
CVE-2024-0111 [MEDIUM] CVE-2024-0111: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed
NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering.
No detection rules found.
Nuclei
FastChat - Open Redirect
nuclei·CVSS 6.1
CVE-2024-10908 [MEDIUM] FastChat - Open Redirect
FastChat - Open Redirect
Detects an open redirect vulnerability in lm-sys/fastchat version 0.2.36, which allows attackers to redirect users to malicious URLs.
Template:
id: CVE-2024-10908
info:
name: FastChat - Open Redirect
author: DhiyaneshDK
severity: medium
description: |
Detects an open redirect vulnerability in lm-sys/fastchat version 0.2.36, which allows attackers to redirect users to malicious URLs.
impact: |
Unauthenticated attackers can redirect users to malicious URLs, potentially facilitating phishing attacks or credential harvesting.
remediation: |
Update FastChat to a version newer than 0.2.36.
reference:
- https://huntr.com/bounties/61f5e725-5579-4d08-8a88-e4ba04e6d1f2
classification:
epss-score: 0.0111
epss-percentile: 0.78157
metadata:
shodan-query: html:"Chatbot Arena
2024-08-31
Published