Description
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | NeMo | NVIDIA Neural Modules 1.22.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | nemo-asr | <= 1.22.0 | — | PYSEC-2024-289 |