Lucene search

NvidiaCVELIST:CVE-2023-25520

HistoryJun 23, 2023 - 5:23 p.m.

CVE-2023-25520

2023-06-2317:23:21

CWE-20

nvidia

www.cve.org

nvidia jetson

linux driver package

nvbootctrl

privilege escalation

denial of service

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Jetson AGX Xavier series, Jetson Xavier NX, Jetson TX2 series, Jetson TX2 NX",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 32.7.4"
      }
    ]
  }
]

References

nvidia.custhelp.com/app/answers/detail/a_id/5466

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2023-25520