CVE-2024-0103
CVE-2024-0103 is a medium-severity vulnerability in Nvidia Triton Inference Server with a CVSS 3.x base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 3.x base score 5.4)
- EPSS exploit prediction: 0% (20th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2024-15904
- Affected product: Nvidia Triton Inference Server
- Published:
- Last modified:
Description
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A successful exploit of this vulnerability may lead to information disclosure.
Frequently asked questions
- What is CVE-2024-0103?
- NVIDIA Triton Inference Server for Linux contains a vulnerability where a user may cause an incorrect Initialization of resource by network issue. A successful exploit of this vulnerability may lead to information disclosure.
- How severe is CVE-2024-0103?
- CVE-2024-0103 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is low, integrity low, and availability none.
- Is CVE-2024-0103 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (20th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2024-0103?
- CVE-2024-0103 affects Nvidia Triton Inference Server. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2024-0103?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2024-0103 have an EU (EUVD) identifier?
- Yes. CVE-2024-0103 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-15904.
- When was CVE-2024-0103 published?
- CVE-2024-0103 was published on 2024-06-13 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:a:nvidia:triton_inference_server:*:*:*:*:*:*:*:*
More vulnerabilities in Nvidia Triton Inference Server
- CVE-2026-24207 — Critical (CVSS 9.8): NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause an authentication bypass. A…
- CVE-2025-23316 — Critical (CVSS 9.8): NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker…
- CVE-2025-23311 — Critical (CVSS 9.8): NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through…
- CVE-2025-23310 — Critical (CVSS 9.8): NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability where an attacker could cause stack…
- CVE-2025-23317 — Critical (CVSS 9.1): NVIDIA Triton Inference Server contains a vulnerability in the HTTP server, where an attacker could start a reverse…
- CVE-2024-0095 — Critical (CVSS 9.0): NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and…