Advisory No: TZCERT/SA/2024/05/02-1

Date of First Release: 2^nd May 2024

Source: NVIDIA

Software Affected: NVIDIA Triton Inference Server for Linux

Overview:

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file that may result in compromise of confidentiality, integrity, and availability of the server.

Description:

Rated with a 9.0 score, this vulnerability is tracked as CVE-2024-0087. This vulnerability impacts NVIDIA’s Triton Inference server for Linux allowing attackers to execute code in the affected server. The vulnerability allows a user to set a logging location to an arbitrary file which can then be misused to infect the server.

Impact:

Successful exploitation of this vulnerability may allow an attacker to take control of the affected system.

Solution:

NVIDIA has released security patches for this vulnerability. Users and administrators are encouraged to apply necessary updates.

References:

1. https://nvidia.custhelp.com/app/answers/detail/a_id/5535
2. https://vulners.com/nvidia/NVIDIA:5535

Foxit has released security updates to address vulnerabilities in Foxit PDF Reader and Foxit PDF Editor for Windows and Mac. Exploitation of these vulnerabilities may allow an attacker to take control.

Users and administrators are encouraged to review Foxit Security Advisories dated 28^th April 2024 and apply necessary updates.

Ubuntu has released security updates to address vulnerabilities in FreeRDP, PHP, pillow, libvirt, gnuTLS, curl and less. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.

Users and administrators are encouraged to review Ubuntu Security Advisories USN-6759-1, USN-6757-1, USN-6744-3, USN-6734-2, USN-6733-2, USN-6718-3 and USN-6756-1 and apply necessary updates.

Palo Alto has released security updates to address a vulnerability in PAN-OS. Exploitation of this vulnerability may allow an attacker to take control of affected system.

Users and administrators are encouraged to review Palo Alto Security Advisory and apply necessary updates.

SUSE has released security updates to address vulnerabilities in docker, ffmpeg, Linux kernel and shim. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.

Users and administrators are encouraged to review SUSE Security Advisories suse-su-20241469-1, suse-su-20241468-1, suse-su-20241466-1 and suse-su-20241462-1 and apply necessary updates.