CVE-2024-0116
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Summary
CVE-2024-0116 is a vulnerability found in NVIDIA Triton Inference Server that allows a user to trigger an out-of-bounds read by releasing a shared memory region while it is still in use. This issue has the potential to lead to denial of service, posing a medium severity risk with a CVSS score of 4.9. Affected products include specific variants of the Triton Inference Server, which require high privileges for exploitation but do not necessitate user interaction. To remediate this vulnerability, organizations should apply available patches from NVIDIA as detailed in their support documentation. The attack vector is network-based, and while the integrity and confidentiality are not impacted, the availability impact is rated as high.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions