Description
NVIDIA DCGM Exporter for all platforms contains a vulnerability in the /debug/pprof endpoints, where an attacker could cause uncontrolled resource consumption by submitting concurrent unauthenticated profiling requests. A successful exploit of this vulnerability might lead to denial of service and information disclosure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NVIDIA DCGM
Default version status: unaffected
0.0 to 4.5.2affected
NVIDIA DCGM Exporter
Default version status: unaffected
0.0 to 4.8.2affected