CVE-2021-34382
Assigner: nvidia
Published: 2021-06-30T10:24:35
State: PUBLISHED
affected: product: NVIDIA Jetson TX1
vendor: NVIDIA
versions: status: affected
version: All Jetson Linux versions prior to r32.5.1
descriptions: value: Trusty TLK contains a vulnerability in the NVIDIA TLK kernel’s tz_map_shared_mem function where an integer overflow on the size parameter causes the request buffer and the logging buffer to overflow, allowing writes to arbitrary addresses within the kernel.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.7
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: description: information disclosure, escalation of privileges, denial of service
type: text
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9