Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-1106
HistoryAug 11, 2021 - 10:15 p.m.

CVE-2021-1106

2021-08-1122:15:07
CWE-787
[email protected]
web.nvd.nist.gov
7
nvidia
linux kernel
nvmap
vulnerability
write
read-only
buffers
escalation of privileges
denial of service
information disclosure
data tampering

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

JSON

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system.

Affected configurations

Nvd
Node
nvidiajetson_linuxRange32.1–32.6.1
AND
nvidiajetson_agx_xavierMatch-
OR
nvidiajetson_nanoMatch-
OR
nvidiajetson_nano_2gbMatch-
OR
nvidiajetson_tx1Match-
OR
nvidiajetson_tx2Match-
OR
nvidiajetson_tx2_nxMatch-
OR
nvidiajetson_xavier_nxMatch-
Node
nvidiashield_experienceRange<9.0
AND
nvidiashield_tvMatch-
VendorProductVersionCPE
nvidiajetson_linux*cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
nvidiajetson_agx_xavier-cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*
nvidiajetson_nano-cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*
nvidiajetson_nano_2gb-cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*
nvidiajetson_tx1-cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*
nvidiajetson_tx2-cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*
nvidiajetson_tx2_nx-cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*
nvidiajetson_xavier_nx-cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*
nvidiashield_experience*cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*
nvidiashield_tv-cpe:2.3:h:nvidia:shield_tv:-:*:*:*:*:*:*:*

Related

cvelist 1
cnvd 1
prion 1
cve 1
nvidia 2
cvelist
cvelist
CVE-2021-1106
2021-08-11 21:32:58
cnvd
cnvd
Jetson Linux Permissions and Access Control Issues Vulnerability
2021-08-06 00:00:00
prion
prion
Information disclosure
2021-08-11 22:15:00
cve
cve
CVE-2021-1106
2021-08-11 22:15:07
nvidia
nvidia
Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB)- August 2021
2021-08-04 00:00:00
Security Bulletin: NVIDIA SHIELD TV - January 2022
2022-01-12 00:00:00

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

JSON
Related for NVD:CVE-2021-1106
cvelist1cnvd1prion1cve1nvidia2