PT-2024-15343 · Nvidia · Nvidia Triton Inference Server

Published 2024-05-04 · Updated 2025-09-19 · CVE-2024-0100

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux (affected versions not specified)

Description The issue is related to a vulnerability in the tracing API, which can be exploited to corrupt system files. This could potentially lead to denial of service and data tampering.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2024-0100

Affected Products

Nvidia Triton Inference Server

References · 5

• https://osv.dev/vulnerability/CVE-2024-0100 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0100 · Security Note
• https://nvidia.custhelp.com/app/answers/detail/a_id/5535 · Vendor Advisory
• https://twitter.com/fletch_ai/status/1786667243256132075 · Twitter Post
• https://t.me/cveNotify/135929 · Telegram Post