8.4
CVE-2025-33225
- EPSS 0.3%
- Veröffentlicht 16.12.2025 17:37:46
- Zuletzt bearbeitet 02.02.2026 16:14:58
- Erkennungen
LoginNVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names. A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tampering.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nvidia ≫ Nvidia Resiliency Extension Version < 0.5.0
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc1
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc2
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc3
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc4
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc5
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc6
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc7
Nvidia ≫ Nvidia Resiliency Extension Version 0.5.0 Update rc8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.22 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Nvidia | 8.4 | 2.5 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-61 UNIX Symbolic Link (Symlink) Following
The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
https://nvd.nist.gov/vuln/detail/CVE-2025-33225
https://www.cve.org/CVERecord?id=CVE-2025-33225
https://nvidia.custhelp.com/app/answers/detail/a_id/5746