CVE-2011-0636 - Vulnerability Details - OpenCVE

The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Nvidia	Cuda Toolkit

Configuration 1 [-]

cpe:2.3:a:nvidia:cuda_toolkit:3.2:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm
http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm
http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm
http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm
http://forums.nvidia.com/index.php?showtopic=190303
http://osvdb.org/70420
http://secunia.com/advisories/42859
http://www.securityfocus.com/archive/1/515591/100/0/threaded
http://www.securityfocus.com/archive/1/516121/100/0/threaded
http://www.securityfocus.com/bid/45717
http://www.securitytracker.com/id?1024962
https://exchange.xforce.ibmcloud.com/vulnerabilities/64710

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2011-01-22T21:00:00

Updated: 2024-08-06T21:58:25.963Z

Reserved: 2011-01-22T00:00:00

Link: CVE-2011-0636

Vulnrichment

No data.

NVD

Status : Modified

Published: 2011-01-22T22:00:07.053

Modified: 2024-11-21T01:24:30.000

Link: CVE-2011-0636

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2011-01-05T00:00:00", "descriptions": [{"lang": "en", "value": "The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-09T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "45717", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/45717"}, {"name": "cuda-toolkit-cudahostalloc-info-disc(64710)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64710"}, {"tags": ["x_refsource_MISC"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm"}, {"tags": ["x_refsource_MISC"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm"}, {"name": "70420", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/70420"}, {"name": "20110107 CUDA drivers/Linux security hole", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/515591/100/0/threaded"}, {"name": "42859", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/42859"}, {"tags": ["x_refsource_MISC"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm"}, {"name": "1024962", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1024962"}, {"tags": ["x_refsource_MISC"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm"}, {"name": "20110201 fix for Nvidia CUDA drivers security breach", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/516121/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://forums.nvidia.com/index.php?showtopic=190303"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2011-0636", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "45717", "refsource": "BID", "url": "http://www.securityfocus.com/bid/45717"}, {"name": "cuda-toolkit-cudahostalloc-info-disc(64710)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64710"}, {"name": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm", "refsource": "MISC", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm"}, {"name": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm", "refsource": "MISC", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm"}, {"name": "70420", "refsource": "OSVDB", "url": "http://osvdb.org/70420"}, {"name": "20110107 CUDA drivers/Linux security hole", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/515591/100/0/threaded"}, {"name": "42859", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/42859"}, {"name": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm", "refsource": "MISC", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm"}, {"name": "1024962", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1024962"}, {"name": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm", "refsource": "MISC", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm"}, {"name": "20110201 fix for Nvidia CUDA drivers security breach", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/516121/100/0/threaded"}, {"name": "http://forums.nvidia.com/index.php?showtopic=190303", "refsource": "CONFIRM", "url": "http://forums.nvidia.com/index.php?showtopic=190303"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T21:58:25.963Z"}, "title": "CVE Program Container", "references": [{"name": "45717", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/45717"}, {"name": "cuda-toolkit-cudahostalloc-info-disc(64710)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64710"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm"}, {"name": "70420", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/70420"}, {"name": "20110107 CUDA drivers/Linux security hole", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/515591/100/0/threaded"}, {"name": "42859", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/42859"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm"}, {"name": "1024962", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1024962"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm"}, {"name": "20110201 fix for Nvidia CUDA drivers security breach", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/516121/100/0/threaded"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://forums.nvidia.com/index.php?showtopic=190303"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2011-0636", "datePublished": "2011-01-22T21:00:00", "dateReserved": "2011-01-22T00:00:00", "dateUpdated": "2024-08-06T21:58:25.963Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:cuda_toolkit:3.2:*:*:*:*:*:*:*", "matchCriteriaId": "D847561A-6054-405E-8AF8-4C10C2B62F65", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations."}, {"lang": "es", "value": "Las funciones (1) cudaHostAlloc y (2) cuMemHostAlloc de los controladores de desarrollador NVIDIA CUDA Toolkit 3.2 para Linux 260.19.26, y posiblemente otras versiones, no inicializan la memoria de tipo \"pinned\" (que nunca se mueve a almacenamiento secundario), lo que permite a usuarios locales leer datos de memoria como fragmentos de archivos durante las operaciones de lectura o escritura."}], "id": "CVE-2011-0636", "lastModified": "2024-11-21T01:24:30.000", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 2.1, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2011-01-22T22:00:07.053", "references": [{"source": "cve@mitre.org", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm"}, {"source": "cve@mitre.org", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm"}, {"source": "cve@mitre.org", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm"}, {"source": "cve@mitre.org", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm"}, {"source": "cve@mitre.org", "url": "http://forums.nvidia.com/index.php?showtopic=190303"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/70420"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/42859"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/515591/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/516121/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/45717"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1024962"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64710"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://forums.nvidia.com/index.php?showtopic=190303"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/70420"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/42859"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/515591/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/516121/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/45717"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1024962"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64710"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}], "source": "nvd@nist.gov", "type": "Primary"}]}