Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0102 State: PUBLISHED Published: 2024-08-08T16:12:57.693Z Last Updated: 2024-08-08T18:13:14.960Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in nvdisasm, where an attacker can cause an out-of-bounds read issue by deceiving a user into reading a malformed ELF file. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5548
CVE ID: CVE-2024-0103 State: PUBLISHED Published: 2024-06-13T21:16:51.611Z Last Updated: 2024-08-01T17:41:15.919Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: nvidia Products: NVIDIA Triton Inference Server Problem Types: CWE-1419 Description: NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5546
CVE ID: CVE-2024-0104 State: PUBLISHED Published: 2024-08-08T17:15:19.315Z Last Updated: 2024-08-08T17:35:33.292Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: NVIDIA Products: Mellanox OS, ONYX, Skyway, MetroX-3 XC, MetroX-2 Problem Types: CWE-284 Description: NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in the LDAP AAA component, where a user can cause improper access. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5559
CVE ID: CVE-2024-0105 State: PUBLISHED Published: 2024-11-01T05:36:06.601Z Last Updated: 2024-11-01T14:17:06.384Z Severity: HIGH (CVSS 8.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: NVIDIA Products: ConnectX4, ConnectX4 LX, ConnectX GA, ConnectX LTS22, ConnectX LTS23, BlueField 1, BlueField GA, BlueField LTS22, BlueField LTS23 Problem Types: CWE-274 Description: NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ce, data tampering, and limited information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5562
CVE ID: CVE-2024-0106 State: PUBLISHED Published: 2024-11-01T05:53:31.345Z Last Updated: 2024-11-01T14:14:53.960Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: NVIDIA Products: BlueField 1, BlueField GA, BlueField LTS22, BlueField LTS23 Problem Types: CWE-274 Description: NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.cust
and limited information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5562
CVE ID: CVE-2024-0107 State: PUBLISHED Published: 2024-08-08T16:57:49.154Z Last Updated: 2025-11-04T17:14:08.942Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Driver, vGPU Software, Cloud Gaming Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References:
disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5557
CVE ID: CVE-2024-0108 State: PUBLISHED Published: 2024-08-08T16:18:27.914Z Last Updated: 2024-08-09T15:48:50.071Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L) Vendors: NVIDIA Products: NVIDIA Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX, Jetson TX1, Jetson Nano series Problem Types: CWE-755 Description: NVIDIA Jetson Linux contains a vulnerability in NvGPU where error handling paths in GPU MMU mapping code fail to clean up a failed mapping attempt. A successful exploit of this vulnerability may lead to denial of service, code execution, and escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
ice, code execution, and escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5555
CVE ID: CVE-2024-0109 State: PUBLISHED Published: 2024-08-31T08:24:39.520Z Last Updated: 2024-09-03T13:54:42.830Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause a crash by passing in a malformed ELF file. A successful exploit of this vulnerability may cause an out of bounds read in the unprivileged process memory which could lead to a limited denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5564
CVE ID: CVE-2024-0110 State: PUBLISHED Published: 2024-08-31T08:27:46.798Z Last Updated: 2024-09-03T13:55:06.946Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-787 Description: NVIDIA CUDA Toolkit contains a vulnerability in command `cuobjdump` where a user may cause an out-of-bound write by passing in a malformed ELF file. A successful exploit of this vulnerability may lead to code execution or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5564
CVE ID: CVE-2024-0111 State: PUBLISHED Published: 2024-08-31T08:30:53.815Z Last Updated: 2024-09-03T13:57:05.556Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-1284 Description: NVIDIA CUDA Toolkit contains a vulnerability in command 'cuobjdump' where a user may cause a crash or produce incorrect output by passing a malformed ELF file. A successful exploit of this vulnerability may lead to a limited denial of service or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5564
CVE ID: CVE-2024-0112 State: PUBLISHED Published: 2025-02-11T23:45:41.260Z Last Updated: 2025-02-12T14:59:09.606Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: Jetson AGX Orin series (including Jetson Orin NX series, Jetson Orin Nano series), IGX Orin Problem Types: CWE-20 Description: NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data corruption, information disclosure, or escalation of privilege. Additi
t lead to code execution, denial of service, data corruption, information disclosure, or escalation of privilege. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5611
CVE ID: CVE-2024-0113 State: PUBLISHED Published: 2024-08-09T02:19:30.529Z Last Updated: 2024-08-13T14:15:20.160Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Mellanox OS, Skyway, MetroX-3 XC, MetroX-2 Problem Types: CWE-35 Description: NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5563
CVE ID: CVE-2024-0114 State: PUBLISHED Published: 2025-03-05T01:34:16.941Z Last Updated: 2025-03-06T04:55:24.929Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Hopper HGX 8-GPU Problem Types: CWE-1244 Description: NVIDIA Hopper HGX for 8-GPU contains a vulnerability in the HGX Management Controller (HMC) that may allow a malicious actor with administrative access on the BMC to access the HMC as an administrator. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
ivileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5561
CVE ID: CVE-2024-0115 State: PUBLISHED Published: 2024-08-09T02:23:48.661Z Last Updated: 2024-08-09T17:16:21.280Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: NVIDIA Products: NVIDIA CV-CUDA Problem Types: CWE-400 Description: NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5560
CVE ID: CVE-2024-0116 State: PUBLISHED Published: 2024-10-01T04:46:22.405Z Last Updated: 2024-10-01T14:03:35.893Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-125 Description: NVIDIA Triton Inference Server contains a vulnerability where a user may cause an out-of-bounds read issue by releasing a shared memory region while it is in use. A successful exploit of this vulnerability may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5565
CVE ID: CVE-2024-0117 State: PUBLISHED Published: 2024-10-26T08:06:19.001Z Last Updated: 2024-11-01T03:55:27.833Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU, vGPU, and Cloud Gaming Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.cus
tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5586
CVE ID: CVE-2024-0118 State: PUBLISHED Published: 2024-10-26T08:06:27.506Z Last Updated: 2024-11-01T03:55:26.857Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU, vGPU, and Cloud Gaming Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.cus
CVE ID: CVE-2024-0119 State: PUBLISHED Published: 2024-10-26T08:06:34.252Z Last Updated: 2024-11-01T03:55:25.799Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU, vGPU, and Cloud Gaming Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.cus
CVE ID: CVE-2024-0120 State: PUBLISHED Published: 2024-10-26T08:06:52.882Z Last Updated: 2024-11-01T03:55:28.765Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU, vGPU, and Cloud Gaming Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.cus
CVE ID: CVE-2024-0121 State: PUBLISHED Published: 2024-10-26T08:07:50.366Z Last Updated: 2024-11-01T03:55:24.794Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU, vGPU, and Cloud Gaming Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.cus
CVE ID: CVE-2024-0122 State: PUBLISHED Published: 2024-11-22T23:23:23.218Z Last Updated: 2024-11-25T17:33:09.660Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L) Vendors: NVIDIA Products: DLS component of NVIDIA License System Problem Types: CWE-862 Description: NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker may cause an unauthorized action. A successful exploit of this vulnerability may lead to partial denial of service and confidential information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5570
CVE ID: CVE-2024-0123 State: PUBLISHED Published: 2024-10-03T16:45:15.279Z Last Updated: 2024-10-03T17:27:29.639Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-1285 Description: NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool where an attacker may cause an improper validation in input issue by tricking the user into running nvdisasm on a malicious ELF file. A successful exploit of this vulnerability may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5577
CVE ID: CVE-2024-0124 State: PUBLISHED Published: 2024-10-03T16:45:49.552Z Last Updated: 2024-10-03T18:05:21.993Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-416 Description: NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause nvdisasm to read freed memory by running it on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5577
CVE ID: CVE-2024-0125 State: PUBLISHED Published: 2024-10-03T16:46:19.800Z Last Updated: 2024-10-03T17:24:07.074Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: CUDA Toolkit Problem Types: CWE-476 Description: NVIDIA CUDA Toolkit for Windows and Linux contains a vulnerability in the nvdisam command line tool, where a user can cause a NULL pointer dereference by running nvdisasm on a malformed ELF file. A successful exploit of this vulnerability might lead to a limited denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5577
CVE ID: CVE-2024-0126 State: PUBLISHED Published: 2024-10-26T08:01:44.000Z Last Updated: 2024-11-01T03:55:23.839Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU, vGPU, and Cloud Gaming Problem Types: CWE-20 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability which could allow a privileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5586
CVE ID: CVE-2024-0127 State: PUBLISHED Published: 2024-10-26T08:10:56.367Z Last Updated: 2024-11-01T03:55:29.744Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: vGPU and Cloud Gaming Problem Types: CWE-20 Description: NVIDIA vGPU software contains a vulnerability in the GPU kernel driver of the vGPU Manager for all supported hypervisors, where a user of the guest OS can cause an improper input validation by compromising the guest OS kernel. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnri
f privileges, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5586
CVE ID: CVE-2024-0128 State: PUBLISHED Published: 2024-10-26T08:14:20.726Z Last Updated: 2024-11-01T03:55:30.906Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: vGPU and Cloud Gaming Problem Types: CWE-732 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager that allows a user of the guest OS to access global resources. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5586
CVE ID: CVE-2024-0129 State: PUBLISHED Published: 2024-10-15T05:39:01.225Z Last Updated: 2024-10-15T13:50:24.936Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: NVIDIA Products: NeMo Problem Types: CWE-22 Description: NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5580
CVE ID: CVE-2024-0130 State: PUBLISHED Published: 2024-12-06T19:48:03.087Z Last Updated: 2024-12-10T16:59:15.863Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: UFM Enterprise GA, UFM Enterprise LTS23, UFM Enterprise Appliance GA, UFM Enterprise Appliance LTS23, UFM SDN Appliance GA, UFM SDN Appliance LTS23, UFM CyberAI GA, UFM CyberAI LTS23 Problem Types: CWE-287 Description: NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI contain a vulnerability where an attacker can cause an improper authentication issue by sending a malformed request through the Ethernet management interface. A successful exploit of this vulnerability might lead to
a malformed request through the Ethernet management interface. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5584
CVE ID: CVE-2024-0131 State: PUBLISHED Published: 2025-02-02T00:15:26.255Z Last Updated: 2025-02-03T17:03:58.152Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver, vGPU software Problem Types: CWE-805 Description: NVIDIA GPU kernel driver for Windows and Linux contains a vulnerability where a potential user-mode attacker could read a buffer with an incorrect length. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5614
CVE ID: CVE-2024-0132 State: PUBLISHED Published: 2024-09-26T05:18:33.211Z Last Updated: 2024-09-27T03:55:16.649Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: Container Toolkit, GPU Operator Problem Types: CWE-367 Description: NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and
this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5582
CVE ID: CVE-2024-0133 State: PUBLISHED Published: 2024-09-26T05:21:33.599Z Last Updated: 2024-09-26T13:30:42.127Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N) Vendors: NVIDIA Products: Container Toolkit, GPU Operator Problem Types: CWE-367 Description: NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/
ata tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5582