NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling.
Date: 2024-04
Affected: nvidia/nemo
Attack vector: dos
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2024-0081
CWE: CWE-770
CVSS: 8.6 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.


Mitigations:

Architectural layers (MAESTRO):