CVE-2011-0636
The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory,…
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations.
- CVSS 2.0
- 2.1 LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 0.38% probability · 31th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- nvidia/cuda toolkit
- Source
- cve@mitre.org
References
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm
- http://forums.nvidia.com/index.php?showtopic=190303
- http://osvdb.org/70420
- http://secunia.com/advisories/42859Vendor Advisory
- http://www.securityfocus.com/archive/1/515591/100/0/threaded
- http://www.securityfocus.com/archive/1/516121/100/0/threaded
- http://www.securityfocus.com/bid/45717
- http://www.securitytracker.com/id?1024962
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64710
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm
- http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm
- http://forums.nvidia.com/index.php?showtopic=190303
- http://osvdb.org/70420
- http://secunia.com/advisories/42859Vendor Advisory
- http://www.securityfocus.com/archive/1/515591/100/0/threaded
- http://www.securityfocus.com/archive/1/516121/100/0/threaded
- http://www.securityfocus.com/bid/45717
- http://www.securitytracker.com/id?1024962
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64710
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.