deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-28830
Published: 2021-06-29
Description: The TIBCO Spotfire Server and TIBCO Enterprise Runtime for R components of TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Enterprise Runtime for R - Server Edition, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO Spotfire Server, TIBCO Spotfire Statistics Services, TIBCO Spotfire Statistics Services, and TIBCO Spotfire Statistics Services contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Runtime for R - Server Edition: versions 1.2.4 and below, TIBCO Enterprise Runtime for R - Server Edition: versions 1.3.0 and 1.3.1, TIBCO Enterprise Runtime for R - Server Edition: versions 1.4.0, 1.5.0, and 1.6.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.3.0 and below, TIBCO Spotfire Server: versions 10.3.12 and below, TIBCO Spotfire Server: versions 10.4.0, 10.5.0, 10.6.0, 10.6.1, 10.7.0, 10.8.0, 10.8.1, 10.9.0, 10.10.0, 10.10.1, 10.10.2, 10.10.3, and 10.10.4, TIBCO Spotfire Server: versions 11.0.0, 11.1.0, 11.2.0, and 11.3.0, TIBCO Spotfire Statistics Services: versions 10.3.0 and below, TIBCO Spotfire Statistics Services: versions 10.10.0, 10.10.1, and 10.10.2, and TIBCO Spotfire Statistics Services: versions 11.1.0, 11.2.0, and 11.3.0.
CVSS Score: 8.8 (HIGH)
References: http://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2021/06/tibco-security-advisory-june-29-2021-tibco-spotfire-2021-28830; http://www.tibco.com/services/support/advisories
CVE: CVE-2021-20079
Published: 2021-06-29
Description: Nessus versions 8.13.2 and earlier were found to contain a privilege escalation vulnerability which could allow a Nessus administrator user to upload a specially crafted file that could lead to gaining administrator privileges on the Nessus host.
CVSS Score: 6.7 (MEDIUM)
References: https://www.tenable.com/security/tns-2021-07; https://www.tenable.com/security/tns-2021-07
CVE: CVE-2021-22338
Published: 2021-06-29
Description: There is an XXE injection vulnerability in eCNS280 V100R005C00 and V100R005C10. A module does not perform the strict operation to the input XML message. Attacker can send specific message to exploit this vulnerability, leading to the module denial of service.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210421-01-cgp-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210421-01-cgp-en
CVE: CVE-2021-22340
Published: 2021-06-29
Description: There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this vulnerability by performing some operations. Successful exploitation of this vulnerability may cause the system to crash. Affected product versions include: ManageOne 6.5.1.SPC200, 8.0.0,8.0.0-LCND81, 8.0.0.SPC100, 8.0.1,8.0.RC2, 8.0.RC3, 8.0.RC3.SPC100;SMC2.0 V600R019C10SPC700,V600R019C10SPC702, V600R019C10SPC703,V600R019C10SPC800, V600R019C10SPC900, V600R019C10SPC910, V600R019C10SPC920, V600R019C10SPC921, V600R019C10SPC922, V600R019C10SPC930, V600R019C10SPC931
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-362
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-racecondition-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210428-01-racecondition-en
CVE: CVE-2021-22439
Published: 2021-06-29
Description: There is a deserialization vulnerability in Huawei AnyOffice V200R006C10. An attacker can construct a specific request to exploit this vulnerability. Successfully exploiting this vulnerability, the attacker can execute remote malicious code injection and to control the device.
CVSS Score: 8.1 (HIGH)
CWE: CWE-502
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210619-01-injection-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210619-01-injection-en
CVE: CVE-2021-29480
Published: 2021-06-29
Description: Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the client side session module uses the application startup time as the signing key by default. This means that if an attacker can determine this time, and if encryption is not also used (which is recommended, but is not on by default), the session data could be tampered with by someone with the ability to write cookies. The default configuration is unsuitable for production use as an application restart renders all sessions invalid and is not multi-host compatible, but its use is not actively prevented. As of Ratpack 1.9.0, the default value is a securely randomly generated value, generated at application startup time. As a workaround, supply an alternative signing key, as per the documentation's recommendation.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-340, CWE-330
References: https://github.com/ratpack/ratpack/blob/29434f7ac6fd4b36a4495429b70f4c[PII_REDACTED]/ratpack-session/src/main/java/ratpack/session/clientside/ClientSideSessionConfig.java#L29; https://github.com/ratpack/ratpack/security/advisories/GHSA-2cc5-23r7-vc4v; https://github.com/ratpack/ratpack/blob/29434f7ac6fd4b36a4495429b70f4c[PII_REDACTED]/ratpack-session/src/main/java/ratpack/session/clientside/ClientSideSessionConfig.java#L29
CVE: CVE-2021-29481
Published: 2021-06-29
Description: Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, the default configuration of client side sessions results in unencrypted, but signed, data being set as cookie values. This means that if something sensitive goes into the session, it could be read by something with access to the cookies. For this to be a vulnerability, some kind of sensitive data would need to be stored in the session and the session cookie would have to leak. For example, the cookies are not configured with httpOnly and an adjacent XSS vulnerability within the site allowed capture of the cookies. As of version 1.9.0, a securely randomly generated signing key is used. As a workaround, one may supply an encryption key, as per the documentation recommendation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://github.com/ratpack/ratpack/pull/1590; https://github.com/ratpack/ratpack/security/advisories/GHSA-phj8-4cq3-794g; https://github.com/ratpack/ratpack/pull/1590
CVE: CVE-2021-29485
Published: 2021-06-29
Description: Ratpack is a toolkit for creating web applications. In versions prior to 1.9.0, a malicious attacker can achieve Remote Code Execution (RCE) via a maliciously crafted Java deserialization gadget chain leveraged against the Ratpack session store. If one's application does not use Ratpack's session mechanism, it is not vulnerable. Ratpack 1.9.0 introduces a strict allow-list mechanism that mitigates this vulnerability when used. Two possible workarounds exist. The simplest mitigation for users of earlier versions is to reduce the likelihood of attackers being able to write to the session data store. Alternatively or additionally, the allow-list mechanism could be manually back ported by providing an alternative implementation of `SessionSerializer` that uses an allow-list.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://github.com/ratpack/ratpack/security/advisories/GHSA-hc33-32vw-rpp9; https://mvnrepository.com/artifact/io.ratpack/ratpack-core; https://github.com/ratpack/ratpack/security/advisories/GHSA-hc33-32vw-rpp9
CVE: CVE-2021-32721
Published: 2021-06-29
Description: PowerMux is a drop-in replacement for Go's http.ServeMux. In PowerMux versions prior to 1.1.1, attackers may be able to craft phishing links and other open redirects by exploiting the trailing slash redirection feature. This may lead to users being redirected to untrusted sites after following an attacker crafted link. The issue is resolved in v1.1.1. There are no existing workarounds.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://github.com/AndrewBurian/powermux/security/advisories/GHSA-mj9r-wwm8-7q52; https://github.com/AndrewBurian/powermux/security/advisories/GHSA-mj9r-wwm8-7q52
CVE: CVE-2021-22329
Published: 2021-06-29
Description: There has a license management vulnerability in some Huawei products. An attacker with high privilege needs to perform specific operations to exploit the vulnerability on the affected device. Due to improper license management of the device, as a result, the license file can be applied and affect integrity of the device. Affected product versions include:S12700 V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S1700 V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S2700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S5700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100;S6700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10,V200R011C10SPC100;S7700 V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10;S9700 V200R007C01,V200R007C01B102,V200R008C00,V200R010C00SPC300,V200R011C00,V200R011C00SPC100,V200R011C10.
CVSS Score: 4.9 (MEDIUM)
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-resourcemanagement-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-resourcemanagement-en
CVE: CVE-2021-22341
Published: 2021-06-29
Description: There is a memory leak vulnerability in Huawei products. A resource management weakness exists in a module. Attackers with high privilege can exploit this vulnerability by performing some operations. This can lead to memory leak. Affected product versions include:IPS Module V500R005C00SPC100,V500R005C00SPC200;NGFW Module V500R005C00SPC100,V500R005C00SPC200;NIP6300 V500R005C00SPC100,V500R005C10SPC200;NIP6600 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6300 V500R005C00SPC100,V500R005C00SPC200;Secospace USG6500 V500R005C00SPC100,V500R005C10SPC200;Secospace USG6600 V500R005C00SPC100,V500R005C00SPC200.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-401
References: https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-01-memleak-en; https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210506-01-memleak-en
CVE: CVE-2021-35941
Published: 2021-06-29
Description: Western Digital WD My Book Live (2.x and later) and WD My Book Live Duo (all versions) have an administrator API that can perform a system factory restore without authentication, as exploited in the wild in June 2021, a different vulnerability than CVE-2018-18472.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: https://arstechnica.com/gadgets/2021/06/hackers-exploited-0-day-not-2018-bug-to-mass-wipe-my-book-live-devices/; https://www.westerndigital.com/support/productsecurity/wdc-21008-recommended-security-measures-wd-mybooklive-wd-mybookliveduo; https://arstechnica.com/gadgets/2021/06/hackers-exploited-0-day-not-2018-bug-to-mass-wipe-my-book-live-devices/
CVE: CVE-2021-35958
Published: 2021-06-30
Description: TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the vendor's position is that tf.keras.utils.get_file is not intended for untrusted archives
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://docs.python.org/3/library/tarfile.html#tarfile.TarFile.extractall; https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d123ce32/tensorflow/python/keras/README.md; https://github.com/tensorflow/tensorflow/blob/b8cad4c631096a34461ff8a07840d5f4d123ce32/tensorflow/python/keras/utils/data_utils.py#L137
CVE: CVE-2021-35959
Published: 2021-06-30
Description: In Plone 5.0 through 5.2.4, Editors are vulnerable to XSS in the folder contents view, if a Contributor has created a folder with a SCRIPT tag in the description field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2021/06/30/2; https://plone.org/security/hotfix/20210518/stored-xss-in-folder-contents; http://www.openwall.com/lists/oss-security/2021/06/30/2
CVE: CVE-2021-32566
Published: 2021-06-30
Description: Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E; https://www.debian.org/security/2021/dsa-4957; https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2021-32567
Published: 2021-06-30
Description: Improper Input Validation vulnerability in HTTP/2 of Apache Traffic Server allows an attacker to DOS the server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E; https://www.debian.org/security/2021/dsa-4957; https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2021-35474
Published: 2021-06-30
Description: Stack-based Buffer Overflow vulnerability in cachekey plugin of Apache Traffic Server. This issue affects Apache Traffic Server 7.0.0 to 7.1.12, 8.0.0 to 8.1.1, 9.0.0 to 9.0.1.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E; https://www.debian.org/security/2021/dsa-4957; https://lists.apache.org/thread.html/ra1a41ff92a70d25bf576d7da2590575e8ff430393a3f4a0c34de4277%40%3Cusers.trafficserver.apache.org%3E
CVE: CVE-2019-18906
Published: 2021-06-30
Description: A Improper Authentication vulnerability in cryptctl of SUSE Linux Enterprise Server for SAP 12-SP5, SUSE Manager Server 4.0 allows attackers with access to the hashed password to use it without having to crack it. This issue affects: SUSE Linux Enterprise Server for SAP 12-SP5 cryptctl versions prior to 2.4. SUSE Manager Server 4.0 cryptctl versions prior to 2.4.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://bugzilla.suse.com/show_bug.cgi?id=1186226; https://bugzilla.suse.com/show_bug.cgi?id=1186226
CVE: CVE-2021-25321
Published: 2021-06-30
Description: A UNIX Symbolic Link (Symlink) Following vulnerability in arpwatch of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Factory, Leap 15.2 allows local attackers with control of the runtime user to run arpwatch as to escalate to root upon the next restart of arpwatch. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS arpwatch versions prior to 2.1a15. SUSE Manager Server 4.0 arpwatch versions prior to 2.1a15. SUSE OpenStack Cloud Crowbar 9 arpwatch versions prior to 2.1a15. openSUSE Factory arpwatch version 2.1a15-169.5 and prior versions. openSUSE Leap 15.2 arpwatch version 2.1a15-lp152.5.5 and prior versions.
CVSS Score: 7.8 (HIGH)
CWE: CWE-61
References: https://bugzilla.suse.com/show_bug.cgi?id=1186240; https://bugzilla.suse.com/show_bug.cgi?id=1186240
CVE: CVE-2021-28692
Published: 2021-06-30
Description: inappropriate x86 IOMMU timeout detection / handling IOMMUs process commands issued to them in parallel with the operation of the CPU(s) issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU spin-waits for the completion of the most recently issued command(s). Some of these waiting loops try to apply a timeout to fail overly-slow commands. The course of action upon a perceived timeout actually being detected is inappropriate: - on Intel hardware guests which did not originally cause the timeout may be marked as crashed, - on AMD hardware higher layer callers would not be notified of the issue, making them continue as if the IOMMU operation succeeded.
CVSS Score: 7.1 (HIGH)
CWE: CWE-269
References: https://security.gentoo.org/glsa/202107-30; https://xenbits.xenproject.org/xsa/advisory-373.txt; https://security.gentoo.org/glsa/202107-30
CVE: CVE-2021-28693
Published: 2021-06-30
Description: xen/arm: Boot modules are not scrubbed The bootloader will load boot modules (e.g. kernel, initramfs...) in a temporary area before they are copied by Xen to each domain memory. To ensure sensitive data is not leaked from the modules, Xen must "scrub" them before handing the page over to the allocator. Unfortunately, it was discovered that modules will not be scrubbed on Arm.
CVSS Score: 5.5 (MEDIUM)
References: https://security.gentoo.org/glsa/202107-30; https://xenbits.xenproject.org/xsa/advisory-372.txt; https://security.gentoo.org/glsa/202107-30
CVE: CVE-2021-30648
Published: 2021-06-30
Description: The Symantec Advanced Secure Gateway (ASG) and ProxySG web management consoles are susceptible to an authentication bypass vulnerability. An unauthenticated attacker can execute arbitrary CLI commands, view/modify the appliance configuration and policy, and shutdown/restart the appliance.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287
References: https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA18331; https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA18331
CVE: CVE-2021-31721
Published: 2021-06-30
Description: Chevereto before 3.17.1 allows Cross Site Scripting (XSS) via an image title at the image upload stage.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://chevereto.com; http://packetstormsecurity.com/files/164183/Cloudron-6.2-Cross-Site-Scripting.html; https://www.exploit-db.com/exploits/49859
CVE: CVE-2021-34373
Published: 2021-06-30
Description: Trusty trusted Linux kernel (TLK) contains a vulnerability in the NVIDIA TLK kernel where a lack of heap hardening could cause heap overflows, which might lead to information disclosure and denial of service.
CVSS Score: 7.9 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34374
Published: 2021-06-30
Description: Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.
CVSS Score: 7.7 (HIGH)
CWE: CWE-20
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34375
Published: 2021-06-30
Description: Trusty contains a vulnerability in all trusted applications (TAs) where the stack cookie was not randomized, which might result in stack-based buffer overflow, leading to denial of service, escalation of privileges, and information disclosure.
CVSS Score: 7.7 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34376
Published: 2021-06-30
Description: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 5 is missing. Improper restriction of operations within the bounds of a memory buffer might lead to denial of service, escalation of privileges, and information disclosure.
CVSS Score: 7.7 (HIGH)
CWE: CWE-119
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34377
Published: 2021-06-30
Description: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 9 is missing. Improper restriction of operations within the bounds of a memory buffer might lead to escalation of privileges, information disclosure, and denial of service.
CVSS Score: 7.7 (HIGH)
CWE: CWE-119
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34378
Published: 2021-06-30
Description: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 11 is missing. Improper restriction of operations within the bounds of a memory buffer might lead to information disclosure, denial of service, or escalation of privileges.
CVSS Score: 7.7 (HIGH)
CWE: CWE-119
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34379
Published: 2021-06-30
Description: Trusty contains a vulnerability in the HDCP service TA where bounds checking in command 10 is missing. The length of an I/O buffer parameter is not checked, which might lead to memory corruption.
CVSS Score: 7.7 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34380
Published: 2021-06-30
Description: Bootloader contains a vulnerability in NVIDIA MB2 where potential heap overflow might cause corruption of the heap metadata, which might lead to arbitrary code execution, denial of service, and information disclosure during secure boot.
CVSS Score: 7.0 (HIGH)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34381
Published: 2021-06-30
Description: Trusty TLK contains a vulnerability in the NVIDIA TLK kernel function where a lack of checks allows the exploitation of an integer overflow on the size parameter of the tz_map_shared_mem function, which might lead to denial of service, information disclosure, or data tampering.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34382
Published: 2021-06-30
Description: Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-190
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34383
Published: 2021-06-30
Description: Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow might lead to denial of service or escalation of privileges.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34384
Published: 2021-06-30
Description: Bootloader contains a vulnerability in NVIDIA MB2 where a potential heap overflow could cause memory corruption, which might lead to denial of service or code execution.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205
CVE: CVE-2021-34385
Published: 2021-06-30
Description: Trusty TLK contains a vulnerability in the NVIDIA TLK kernel where an integer overflow in the calculation of a length could lead to a heap overflow.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-190
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5205; https://nvidia.custhelp.com/app/answers/detail/a_id/5205