CVE-2021-34391

Опубликовано: 22 июн. 2021

Источник: nvd

CVSS3: 5.3

CVSS3: 5.5

CVSS2: 4.9

EPSS Низкий

Описание

Trusty contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow through a specific SMC call that is triggered by the user, which may lead to denial of service.

Ссылки

https://nvidia.custhelp.com/app/answers/detail/a_id/5205
Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/5205
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*

Версия до 32.5.1 (исключая)

cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*

EPSS

Процентиль: 14%

0.00045

Низкий

5.3 Medium

CVSS3

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

GHSA-46g8-9qh6-fjgm

github

больше 3 лет назад

Trusty TLK contains a vulnerability in the NVIDIA TLK kernelï¿½s tz_handle_trusted_app_smc function where a lack of integer overflow checks on the req_off and param_ofs variables leads to memory corruption of critical kernel structures.

EPSS

Процентиль: 14%

0.00045

Низкий

5.3 Medium

CVSS3

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

CWE-190