NVIDIA CV-CUDA CVE-2024-0115 Uncontrolled Resource Consumption Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - CVE ID: CVE-2024-0115 - Description: NVIDIA CV-CUDA for Ubuntu 20.04, Ubuntu 22.04, and Jetpack contains a vulnerability in Python APIs where a user may cause an uncontrolled resource consumption issue by a long-running CV-CUDA Python process. A successful exploit of this vulnerability may lead to denial of service and data loss. 2. Vulnerability Impact: - Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H - Base Score: 6.1 - Severity: Medium - CWE: -400 - Impact: Denial of service, data loss 3. Affected Products: - NVIDIA CV-CUDA 4. Affected Versions: - v0.1.x - v0.9.x 5. Updated Versions: - v0.10.0 6. Security Update: - Update Date: August 8, 2024 - Update Time: 21:01 7. Disclaimer: - All information, design specifications, reference boards, documents, drawings, diagnostic tools, lists, and other materials (collectively referred to as "Materials") provided by NVIDIA are provided "as is" without any warranty, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, or non-infringement. NVIDIA is not responsible for any infringement of patents or other third-party rights resulting from the use of such information. NVIDIA does not grant any license to patents or patent rights. All information in this publication is subject to change without notice. This publication supersedes and replaces all previously provided information. NVIDIA products may not be used as critical components in life support devices or systems without prior written approval from NVIDIA. 8. Support Information: - For any questions regarding this security bulletin, please contact NVIDIA Support. This information helps users understand the details of the vulnerability, the affected products and versions, and how to update to protect their systems from the vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

NVIDIA CV-CUDA CVE-2024-0115 Uncontrolled Resource Consumption Vulnerability Advisory