We use cookies to improve your experience on our site.
AVID-2026-R1343
Description
CVE (CVE-2024-0100)
Details
NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system files. A successful exploit of this vulnerability might lead to denial of service and data tampering.
Reason for inclusion in AVID: The CVE describes a software vulnerability in NVIDIA Triton Inference Server (AI model serving/deployment framework). It affects software used to deploy AI models and could enable DoS and data tampering by exploiting the tracing API. This is a software supply chain issue in AI systems and relates to components used to build/run general-purpose AI systems, not hardware/firmware-only.
References
Affected or Relevant Artifacts
- Developer: nvidia
- Deployer: nvidia
- Artifact Details:
| Type | Name |
|---|---|
| System | NVIDIA Triton Inference Server |
Impact
AVID Taxonomy Categorization
- Risk domains: Security
- SEP subcategories: S0100: Software Vulnerability
- Lifecycle stages: L06: Deployment
CVSS
| Version | 3.1 |
| Vector String | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H |
| Base Score | 6.5 |
| Base Severity | 🟠 Medium |
CWE
| ID | Description |
|---|---|
| CWE-73 | CWE-73 |
Other information
- Report Type: Advisory
- Credits:
- Date Reported: 2024-05-09
- Version: 0.3.3
- AVID Entry