Описание
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
A flaw was found in the NVIDIA Nsight Systems for Linux installer. An attacker could exploit this vulnerability by providing a malicious string as the installation path, leading to an operating system (OS) command injection. A successful exploit could result in escalation of privileges, arbitrary code execution, data tampering, denial of service, and information disclosure.
Отчет
This vulnerability is rated Important as it impacts the NVIDIA Nsight Systems installer. An attacker could achieve OS command injection by providing a malicious installation path during the execution of the installer. This could lead to escalation of privileges and arbitrary code execution on affected systems running NVIDIA Nsight Systems.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 10 | cuda-nsight-systems-13-0 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | cuda-nsight-systems-13-1 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | nsight-systems-2025.3.2 | Fix deferred | ||
| Red Hat Enterprise Linux 10 | nsight-systems-2025.5.2 | Fix deferred |
Показывать по
Дополнительная информация
Статус:
6.1 Medium
CVSS3
Связанные уязвимости
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run i ...
NVIDIA Nsight Systems for Linux contains a vulnerability in the .run installer, where an attacker could cause an OS command injection by supplying a malicious string to the installation path. A successful exploit of this vulnerability might lead to escalation of privileges, code execution, data tampering, denial of service, and information disclosure.
Уязвимость инструмента анализа производительности системы NVIDIA NSight Systems программного средства для параллельных вычислений на графических процессорах NVIDIA CUDA Toolkit, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации, повысить свои привилегии, выполнить произвольный код, осуществить подмену данных или вызвать отказ в обслуживании
6.1 Medium
CVSS3