Описание
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
A flaw was found in NVIDIA Nsight Systems. This vulnerability allows a local attacker to achieve arbitrary code execution by manually invoking the process_nsys_rep_cli.py script with a malicious string. This OS command injection can lead to privilege escalation, data tampering, denial of service, and information disclosure.
Отчет
This vulnerability is rated Important as it allows for OS command injection in NVIDIA Nsight Systems. The flaw occurs when the process_nsys_rep_cli.py script is manually invoked with a malicious string, potentially leading to code execution and privilege escalation. Red Hat Enterprise Linux systems with affected nsight-systems components are impacted if the script is used in this manner.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | cuda-nsight-systems-13-0 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | cuda-nsight-systems-13-1 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | nsight-systems-2025.3.2 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | nsight-systems-2025.5.2 | Fix deferred |
Показывать по
Дополнительная информация
Статус:
EPSS
6.6 Medium
CVSS3
Связанные уязвимости
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot reci ...
NVIDIA Nsight Systems contains a vulnerability in the gfx_hotspot recipe, where an attacker could cause an OS command injection by supplying a malicious string to the process_nsys_rep_cli.py script if the script is invoked manually. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure.
EPSS
6.6 Medium
CVSS3