CVE-2024-0115

Published: Aug 12, 2024Modified: Dec 26, 2024

6.1

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Exploitability: 1.8 / Impact: 4.2

Source: NVD

Description

NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.

Affected (11)

Products: Nvidia: Cv Cuda

Nvidia

1 product

Cv Cuda

Configuration A

11 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Nvidia Cv Cuda	Version 0.1.0 prealpha
Nvidia Cv Cuda	Version 0.2.0 alpha
Nvidia Cv Cuda	Version 0.2.1 alpha
Nvidia Cv Cuda	Version 0.3.0 beta
Nvidia Cv Cuda	Version 0.3.1 beta
Nvidia Cv Cuda	Version 0.4.0 beta
Nvidia Cv Cuda	Version 0.5.0 beta
Nvidia Cv Cuda	Version 0.6.0 beta
Nvidia Cv Cuda	Version 0.7.0 beta
Nvidia Cv Cuda	Version 0.8.0 beta
Nvidia Cv Cuda	Version 0.9.0 beta

Running on/with	Platform Versions
Canonical Ubuntu Linux	Version 20.04
Canonical Ubuntu Linux	Version 22.04
Nvidia Jetpack Software Development Kit	All versions

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (1)

https://nvidia.custhelp.com/app/answers/detail/a_id/5560

Source: psirt@nvidia.com

Vendor Advisory

Timeline

No history available yet.