NVD

Id
7686  
Name
CVE-2011-0636  
Description
The (1) cudaHostAlloc and (2) cuMemHostAlloc functions in the NVIDIA CUDA Toolkit 3.2 developer drivers for Linux 260.19.26, and possibly other versions, do not initialize pinned memory, which allows local users to read potentially sensitive memory, such as file fragments during read or write operations.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-01-22  
Modified Date
2011-09-16  
Seq
2011-0636  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
43546 7686 CVE-2011-0636 http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7675-1380-00.htm  View
43547 7686 CVE-2011-0636 http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7676-1022+00.htm  View
43548 7686 CVE-2011-0636 http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7677-1391+00.htm  View
43549 7686 CVE-2011-0636 http://classic.chem.msu.su/cgi-bin/ceilidh.exe/gran/gamess/forum/?C35e9ea936bHW-7681-487+00.htm  View
43550 7686 CVE-2011-0636 http://forums.nvidia.com/index.php?showtopic=190303  View
43551 7686 CVE-2011-0636 20110107 CUDA drivers/Linux security hole  View
43552 7686 CVE-2011-0636 20110201 fix for Nvidia CUDA drivers security breach  View
43553 7686 CVE-2011-0636 45717  View
43554 7686 CVE-2011-0636 1024962  View
43555 7686 CVE-2011-0636 cuda-toolkit-cudahostalloc-info-disc(64710)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33940 JVNDB-2011-004182 NVIDIA CUDA Toolkit の cudaHostAlloc 関数における重要なメモリを読まれる脆弱性 NVIDIA CUDA Toolkit デベロッパ向けドライバの cudaHostAlloc および cuMemHostAlloc 関数は、pinned メモリを初期化しないため、読み込みまたは書き込み操作中のファイルの断片といった重要なメモリを読まれる脆弱性が存在します。 CVE-2011-0636 48543 CVE-2011-0636 7686 2.1 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004182.html 2011-01-22 2012-03-27 View