Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-31036

NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Published

2024-01-12T17:15:09.183

Last Modified

2024-11-21T08:01:17.673

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-23
  • Type: Primary
    CWE-22
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nvidia triton_inference_server < 2.40 Yes
Operating System linux linux_kernel - No
Operating System microsoft windows - No
References