PT-2011-2514 · Nvidia · Nvidia Cuda Toolkit

Alex Granovsky · Published 2011-01-22 · Updated 2018-10-09 · CVE-2011-0636

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions NVIDIA CUDA Toolkit versions 3.2 developer drivers for Linux 260.19.26

Description The issue concerns the cudaHostAlloc and cuMemHostAlloc functions, which do not initialize pinned memory. This allows local users to read potentially sensitive memory, such as file fragments during read or write operations.

Recommendations For NVIDIA CUDA Toolkit version 3.2, consider updating to a version where the cudaHostAlloc and cuMemHostAlloc functions properly initialize pinned memory to prevent unauthorized access to sensitive data.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-0636

Affected Products

Nvidia Cuda Toolkit

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2011-0636 · Security Note
• http://secunia.com/advisories/42859 · Vendor Advisory
• http://osvdb.org/70420 · Note
• http://securityfocus.com/bid/45717 · Note
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm · Note
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm · Note
• http://securitytracker.com/id?1024962 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64710 · Note
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm · Note
• http://securityfocus.com/archive/1/516121/100/0/threaded · Note
• http://forums.nvidia.com/index.php?showtopic=190303 · Note
• http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm · Note
• http://securityfocus.com/archive/1/515591/100/0/threaded · Note