by Kastro
Paper/Archive/CVE-2024-0087

CVE-2024-0087

nvidia NVIDIA Triton Inference Server — CVE

EPSS 20%CVSS 9.0
critical.is priorityof 100
47
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 97.4.974 × 2019.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected

ProductAffectedFixed inSource
NVIDIA Triton Inference Server22.09 to 24.03–CNA
triton_inference_server22.09 – 24.03–CISA-ADP

Scores by source

nvidia (CNA)9.0CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refnvidia.custhelp.com/app/answers/detail/a_id/5535