The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.8.0. It is, therefore, affected by multiple vulnerabilities as referenced in the February_2025 advisory.

  - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53870, CVE-2024-53872, CVE-2024-53874,     CVE-2024-53875)

  - CVE202453870  NVIDIA CUDA toolkit for all platforms contains a vulnerability in the cuobjdump binary,     where a user could cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful     exploit of this vulnerability might lead to a partial denial of service. (CVE-2024-53870)

  - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53871, CVE-2024-53876)

  - NVIDIA CUDA toolkit for Windows contains a vulnerability in the cuobjdump binary, where a user could cause     an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53873)

  - NVIDIA CUDA toolkit for all platforms contains a vulnerability in the nvdisasm binary, where a user could     cause a NULL pointer exception by passing a malformed ELF file to nvdisasm. A successful exploit of this     vulnerability might lead to a partial denial of service. (CVE-2024-53877)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

NVIDIA CUDA Toolkit 12.8.0 Multiple Vulnerabilities (February_2025)

low Nessus Plugin ID 216913

Version 1.3

Version 1.2

Version 1.1

Version 1.3 May 29, 2025, 3:58 PM IAVM reference Plugin Feed: 202505291558
Version 1.2 Feb 28, 2025, 2:46 PM Plugin metadata (Added IAVM data) Plugin Feed: 202502281446
Version 1.1 Feb 28, 2025, 12:42 AM New Plugin Feed: 202502280042