PT-2011-2514 · Nvidia · Nvidia Cuda Toolkit

Alex Granovsky · Publicado 2011-01-22 · Atualizado 2018-10-09 · CVE-2011-0636

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit versions 3.2 developer drivers for Linux 260.19.26

Description The issue concerns the cudaHostAlloc and cuMemHostAlloc functions, which do not initialize pinned memory. This allows local users to read potentially sensitive memory, such as file fragments during read or write operations.

Recommendations For NVIDIA CUDA Toolkit version 3.2, consider updating to a version where the cudaHostAlloc and cuMemHostAlloc functions properly initialize pinned memory to prevent unauthorized access to sensitive data.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-0636

Produtos afetados

Nvidia Cuda Toolkit

Referências · 13

• http://osvdb.org/70420 · Nota
• http://securityfocus.com/bid/45717 · Nota
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm · Nota
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0636 · Nota de Segurança
• http://securitytracker.com/id?1024962 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64710 · Nota
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm · Nota
• http://secunia.com/advisories/42859 · Aviso do Fabricante
• http://securityfocus.com/archive/1/516121/100/0/threaded · Nota
• http://forums.nvidia.com/index.php?showtopic=190303 · Nota
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm · Nota
• http://securityfocus.com/archive/1/515591/100/0/threaded · Nota