Debian Nvidia-Cuda-Toolkit vulnerabilities

CVE-2022-21821 [HIGH] CVE-2022-21821: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.... NVIDIA CUDA Toolkit SDK contains an integer overflow vulnerability in cuobjdump.To exploit this vulnerability, a remote attacker would require a local user to download a specially crafted, corrupted file and locally execute cuobjdump against the file. Such an attack may lead to remote code execution that causes complete denial of service and an impact on

CVE-2020-5991 [HIGH] CVE-2020-5991: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in t... NVIDIA CUDA Toolkit, all versions prior to 11.1.1, contains a vulnerability in the NVJPEG library in which an out-of-bounds read or write operation may lead to code execution, denial of service, or information disclosure. Scope: local bookworm: resolved (fixed in 11.1.1-2) bullseye: resolved (fixed in 11.1.1-2) forky: resolved (fixed in 11.1.1-2) sid: reso

CVE-2023-25512 [MEDIUM] CVE-2023-25512: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump,... NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds memory read by running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure. Scope: local bookworm: open bullse

CVE-2023-25513 [MEDIUM] CVE-2023-25513: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump,... NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure. Scope: local bookwor

CVE-2023-25514 [MEDIUM] CVE-2023-25514: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump,... NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in cuobjdump, where an attacker may cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file. A successful exploit of this vulnerability may lead to limited denial of service, code execution, and limited information disclosure. Scope: local bookwor

CVE-2022-34667 [MEDIUM] CVE-2022-34667: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in ... NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which may lead to a limited denial of service and some loss of d

CVE-2023-0193 [MEDIUM] CVE-2023-0193: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local use... NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious binary may cause an out-of-bounds read, which may result in a limited denial of service and limited information disclosure. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 12.1.0-2) sid: resolved (fixed in 12.1.0-2)

CVE-2023-25523 [LOW] CVE-2023-25523: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisa... NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by providing a user with a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 12.2.0

CVE-2024-0072 [LOW] CVE-2024-0072: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and ... NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 12.4.1-1) sid: resolved (fi

CVE-2024-0076 [LOW] CVE-2024-0076: nvidia-cuda-toolkit - NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and ... NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 12.4.1-1) sid: resolved (fi

CVE-2023-0196 [LOW] CVE-2023-0196: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running ... NVIDIA CUDA Toolkit SDK contains a bug in cuobjdump, where a local user running the tool against an ill-formed binary may cause a null- pointer dereference, which may result in a limited denial of service. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 12.1.0-2) sid: resolved (fixed in 12.1.0-2) trixie: resolved (fixed in 12.1.0-2)

CVE-2023-25510 [LOW] CVE-2023-25510: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereferenc... NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary may cause a limited denial of service. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 12.1.1-1) sid: resolved (fixed in 12.1.1-1) trixie: resolved (fixed in 12.1.1-1)

CVE-2023-25511 [LOW] CVE-2023-25511: nvidia-cuda-toolkit - NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump,... NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may lead to a limited denial of service. Scope: local bookworm: open bullseye: open forky: resolved (fixed in 12.1.1-1) sid: resolved (fixed in 12.1.1-1) trixie: resolved (fixed in 12.1.1-1)