6.7

CVE-2021-34374

Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Jetson Linux Version < 32.5.1
   Nvidia ≫ Jetson Agx Xavier 16gb Version -
   Nvidia ≫ Jetson Agx Xavier 32gb Version -
   Nvidia ≫ Jetson Agx Xavier 8gb Version -
   Nvidia ≫ Jetson Tx2 Version -
   Nvidia ≫ Jetson Tx2 4gb Version -
   Nvidia ≫ Jetson Tx2 Nx Version -
   Nvidia ≫ Jetson Tx2i Version -
   Nvidia ≫ Jetson Xavier Nx Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.151
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
Nvidia 7.7 1.1 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://nvidia.custhelp.com/app/answers/detail/a_id/5205
Vendor Advisory