NVIDIA NeMo Framework Vulnerability Could Lead to Server-Side Denial of Service

CVE-2024-0081
8.6HIGH

Key Information

Vendor
Nvidia
Status
Nemo
Vendor
CVE Published:
5 April 2024

Summary

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.

Affected Version(s)

NeMo = NVIDIA Neural Modules 1.22.0

CVSS V3.1

Score:
8.6
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Risk change from: null to: 8.6 - (HIGH)

  • Vulnerability published.

Collectors

NVD DatabaseMitre Database
.