NVIDIA NeMo Framework Vulnerability Could Lead to Server-Side Denial of Service
CVE-2024-0081

8.6HIGH

Key Information:

Vendor
Nvidia
Status
Nemo
Vendor
CVE Published:
5 April 2024

Summary

The NVIDIA NeMo framework for Ubuntu contains a vulnerability located in tools/asr_webapp that permits an attacker to allocate resources without appropriate limits or controls. Exploiting this vulnerability successfully could result in a denial of service on the server side, impacting the availability of applications and services reliant on the NeMo framework.

Affected Version(s)

NeMo NVIDIA Neural Modules 1.22.0

References

https://github.com/NVIDIA/NeMo/security/advisories/GHSA-x...

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

.