/ data / vuln_en / triton-inference-server / CVE-2025-23311.yaml
CVE-2025-23311.yaml
 1  info:
 2    name: triton-inference-server
 3    cve: CVE-2025-23311
 4    summary: Stack overflow vulnerability in NVIDIA Triton Inference Server.
 5    details: |
 6      NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a stack overflow through specially crafted HTTP requests. 
 7      A successful exploit of this vulnerability might lead to remote code execution, denial of service, information disclosure, or data tampering.
 8    cvss: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
 9    severity: CRITICAL
10    security_advise: |
11      1. Refer to the NVIDIA security advisory for specific patch information and upgrade instructions.
12      2. Implement network access controls to restrict access to the Triton Inference Server.
13      3. Monitor server logs for suspicious activity.
14  rule: ""
15  references:
16    - https://nvd.nist.gov/vuln/detail/CVE-2025-23311
17    - https://nvidia.custhelp.com/app/answers/detail/a_id/5687
18    - https://www.cve.org/CVERecord?id=CVE-2025-23311