CVE-2024-0115

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-0115
NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/5560 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:nvidia:cv-cuda:0.1.0:prealpha:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.2.0:alpha:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.2.1:alpha:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.3.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.3.1:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.4.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.5.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.6.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.7.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.8.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.9.0:beta:*:*:*:*:*:*
OR cpe:2.3:a:nvidia:jetpack_software_development_kit:-:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
History

26 Dec 2024, 19:21

Type Values Removed Values Added
CPE cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_20.04:*:*
cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_22.04:*:*
cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:jetpack:*:*		 cpe:2.3:a:nvidia:cv-cuda:0.5.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.7.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.8.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.9.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.6.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.3.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.1.0:prealpha:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.2.0:alpha:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:22.04:*:*:*:lts:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.2.1:alpha:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.3.1:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:cv-cuda:0.4.0:beta:*:*:*:*:*:*
cpe:2.3:a:nvidia:jetpack_software_development_kit:-:*:*:*:*:*:*:*
First Time Canonical
Nvidia jetpack Software Development Kit
Canonical ubuntu Linux

11 Sep 2024, 17:24

Type Values Removed Values Added
CWE NVD-CWE-noinfo
Summary
  • (es) NVIDIA CV-CUDA para Ubuntu 20.04, Ubuntu 22.04 y Jetpack contiene una vulnerabilidad en las API de Python donde un usuario puede causar un problema de consumo incontrolado de recursos debido a un proceso CV-CUDA Python de larga duración. Una explotación exitosa de esta vulnerabilidad puede provocar denegación de servicio y pérdida de datos.
CPE cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_20.04:*:*
cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:jetpack:*:*
cpe:2.3:a:nvidia:cv-cuda:*:*:*:*:*:ubuntu_22.04:*:*
First Time Nvidia
Nvidia cv-cuda
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5560 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5560 - Vendor Advisory

12 Aug 2024, 13:41

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-12 13:38

Updated : 2024-12-26 19:21

NVD link : CVE-2024-0115

Mitre link : CVE-2024-0115

CVE.ORG link : CVE-2024-0115

JSON object : View

Products Affected

nvidia

  • jetpack_software_development_kit
  • cv-cuda

canonical

  • ubuntu_linux
CWE
CWE-400

Uncontrolled Resource Consumption

NVD-CWE-noinfo