SB2025022636 - Multiple vulnerabilities in NVIDIA CUDA Toolkit
Published: February 26, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 9 secuirty vulnerabilities.
1) Out-of-bounds read (CVE-ID: CVE-2024-53870)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the cuobjdump binary. A remote attacker can create a specially crafted ELF file, trick the victim into opening it, trigger an out-of-bounds read error and cause a denial of service condition on the system.
2) Out-of-bounds read (CVE-ID: CVE-2024-53871)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the nvdisasm binary. A remote attacker can create a specially crafted ELF file, trick the victim into opening it, trigger an out-of-bounds read error and cause a denial of service condition on the system.
3) Out-of-bounds read (CVE-ID: CVE-2024-53872)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the cuobjdump binary. A remote attacker can create a specially crafted ELF file, trick the victim into opening it, trigger an out-of-bounds read error and cause a denial of service condition on the system.
4) Out-of-bounds read (CVE-ID: CVE-2024-53874)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the cuobjdump binary. A remote attacker can create a specially crafted ELF file, trick the victim into opening it, trigger an out-of-bounds read error and cause a denial of service condition on the system.
5) Out-of-bounds read (CVE-ID: CVE-2024-53875)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the cuobjdump binary. A remote attacker can create a specially crafted ELF file, trick the victim into opening it, trigger an out-of-bounds read error and cause a denial of service condition on the system.
6) Out-of-bounds read (CVE-ID: CVE-2024-53876)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in the nvdisasm binary. A remote attacker can create a specially crafted ELF file, trick the victim into opening it, trigger an out-of-bounds read error and cause a denial of service condition on the system.
7) NULL pointer dereference (CVE-ID: CVE-2024-53877)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in the nvdisasm binary. A remote attacker can trick a victim to open a specially crafted ELF file and perform a denial of service (DoS) attack.
8) Input validation error (CVE-ID: CVE-2024-53878)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the cuobjdump binary. A remote user can trick a victim to open a specially crafted ELF file and perform a denial of service (DoS) attack.
9) Input validation error (CVE-ID: CVE-2024-53879)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to insufficient validation of user-supplied input in the cuobjdump binary. A remote user can trick a victim to open a specially crafted ELF file and perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.