CVE-2024-0116

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Oct 1, 2024
Updated: Oct 4, 2024
CWE ID 125

Summary

CVE-2024-0116 identifies a vulnerability in the NVIDIA Triton Inference Server, which allows for an out-of-bounds read issue due to the release of a shared memory region while in use. This flaw could result in a denial of service if successfully exploited and requires high privileges, with no user interaction needed, making it potentially dangerous for organizations relying on this server. The attack vector is network-based, and the availability impact is rated high, indicating that services may be disrupted. Remediation steps should include updating to the latest version provided by NVIDIA as detailed in their support documentation. The vulnerability has been categorized with a medium severity rating and an exploitability score of 1.2, highlighting the need for prompt attention from affected users.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share