CVE-2025-23311.yaml
1 info: 2 name: triton-inference-server 3 cve: CVE-2025-23311 4 summary: Stack overflow vulnerability in NVIDIA Triton Inference Server. 5 details: | 6 NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests. 7 A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, or data tampering. 8 cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 9 severity: CRITICAL 10 security_advise: | 11 1. Refer to the NVIDIA security advisory for specific patch information and upgrade instructions. 12 2. Implement network access controls to restrict access to the Triton Inference Server. 13 3. Monitor server logs for suspicious activity. 14 rule: "" 15 references: 16 - https://nvd.nist.gov/vuln/detail/CVE-2025-23311 17 - https://nvidia.custhelp.com/app/answers/detail/a_id/5687 18 - https://www.cve.org/CVERecord?id=CVE-2025-23311