2 lines
2.6 KiB
JSON
2 lines
2.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","platforms":["Windows","Linux"],"product":"CUDA Toolkit","vendor":"NVIDIA","versions":[{"status":"affected","version":"All versions up to and including CUDA Toolkit 12.6U1"}]}],"source":"psirt@nvidia.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:nvidia:cuda_toolkit:*:*:*:*:*:*:*:*","matchCriteriaId":"4A3D6FCF-2D35-4D57-9FF3-3EE83FFCD8EC","versionEndExcluding":"12.6.2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*","matchCriteriaId":"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1","vulnerable":false},{"criteria":"cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","matchCriteriaId":"A2572D17-1DE6-457B-99CC-64AFD54487EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service."},{"lang":"es","value":"NVIDIA CUDA Toolkit para Windows y Linux contiene una vulnerabilidad en la herramienta de línea de comandos nvdisam, donde un usuario puede hacer que nvdisasm lea la memoria liberada al ejecutarla en un archivo ELF mal formado. Una explotación exitosa de esta vulnerabilidad podría provocar una denegación de servicio limitada."}],"id":"CVE-2024-0124","lastModified":"2026-06-17T06:52:49.783","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":3.3,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":1.4,"source":"psirt@nvidia.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0124","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-10-03T18:04:58.998917Z","version":"2.0.3"}}]},"published":"2024-10-03T17:15:14.253","references":[{"source":"psirt@nvidia.com","tags":["Vendor Advisory"],"url":"https://nvidia.custhelp.com/app/answers/detail/a_id/5577"}],"sourceIdentifier":"psirt@nvidia.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-416"}],"source":"psirt@nvidia.com","type":"Secondary"}]}
|