CVE-2022-34667: Buffer Overflow
NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which may lead to a limited denial of service and some loss of data integrity for the local user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/nvidia-cuda-toolkitto a version that resolves this vulnerability.Fixed in 11.8.0-5~deb12u1Fixed in 12.4.1-2Fixed in 12.4.1-8.2 - Upgrade
Upgrade
debian/nvidia-cuda-toolkitto a version that resolves this vulnerability.Fixed in 11.8.0-2
Event History
Frequently Asked Questions
What is the vulnerability ID of this NVIDIA CUDA Toolkit SDK vulnerability?
The vulnerability ID for this NVIDIA CUDA Toolkit SDK vulnerability is CVE-2022-34667.
What is the affected software for this vulnerability?
The affected software for this vulnerability is NVIDIA CUDA Toolkit.
How severe is the vulnerability CVE-2022-34667?
The severity of vulnerability CVE-2022-34667 is medium with a severity value of 4.4.
How can this vulnerability be exploited?
This vulnerability can be exploited by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally.
Is the Linux kernel affected by this vulnerability?
No, the Linux kernel is not affected by this vulnerability.