IssueTracker

This will create a public issue which anybody can view and comment on.

Problem you have encountered:

• Reported the CVE [1] on newly created workbench instances with version M127 or older
• The violation details reported in the internal violation tool, for example in [2]

Additional notes, links:
[1] OpenSSL crypto/bn/bn_gf2m.c Multiple Function GF(2^m) Parameter Handling Out-of-bounds Access Arbitrary Code Execution --- CVE-2024-9143

[2]
Path : /usr/local/cuda-11.8/nsight-systems-2022.4.2/target-linux-x64/CollectX/libcrypto.so.10 Reported version : 1.0.2k Fixed version : 1.0.2zl

Path : /usr/local/cuda-11.8/nsight-systems-2022.4.2/target-linux-x64/CollectX/libssl.so.10 Reported version : 1.0.2k Fixed version : 1.0.2zl

Path : /usr/local/cuda-11.8/nsight-compute-2022.3.0/host/linux-desktop-glibc_2_11_3-x64/libcrypto.so.1.1 Reported version : 1.1.1k Fixed version : 1.1.1zb

Path : /usr/local/cuda-11.8/nsight-compute-2022.3.0/host/linux-desktop-glibc_2_11_3-x64/libssl.so.1.1 Reported version : 1.1.1k Fixed version : 1.1.1zb

Path : /usr/local/cuda-11.8/nsight-systems-2022.4.2/host-linux-x64/libcrypto.so.1.1 Reported version : 1.1.1k Fixed version : 1.1.1zb

Path : /usr/local/cuda-11.8/nsight-systems-2022.4.2/host-linux-x64/libssl.so.1.1 Reported version : 1.1.1k Fixed version : 1.1.1zb

Path : /usr/local/cuda-11.8/nsight-systems-2022.4.2/target-linux-x64/CollectX/libcrypto.so.10 Reported version : 1.0.2k Fixed version : 1.0.2zl

Path : /usr/local/cuda-11.8/nsight-systems-2022.4.2/target-linux-x64/CollectX/libssl.so.10 Reported version : 1.0.2k Fixed version : 1.0.2zl