Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2021-34389
HistoryJun 21, 2021 - 10:15 p.m.

CVE-2021-34389

2021-06-2122:15:07
CWE-401
[email protected]
web.nvd.nist.gov

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

15.8%

JSON

Trusty contains a vulnerability in NVIDIA OTE protocol message parsing code, which is present in all the TAs. An incorrect bounds check can allow a local user through a malicious client to access memory from the heap in the TrustZone, which may lead to information disclosure.

Affected configurations

NVD
Node
nvidiajetson_agx_xavier_16gbMatch-
OR
nvidiajetson_agx_xavier_32gbMatch-
OR
nvidiajetson_agx_xavier_8gbMatch-
OR
nvidiajetson_tx2Match-
OR
nvidiajetson_tx2_4gbMatch-
OR
nvidiajetson_tx2_nxMatch-
OR
nvidiajetson_tx2iMatch-
OR
nvidiajetson_xavier_nxMatch-developer_kit
OR
nvidiajetson_xavier_nxMatch-production
AND
nvidiajetson_linuxRange<32.5.1

Related

cvelist 1
cnvd 1
cve 1
prion 1
nvidia 1
cvelist
cvelist
CVE-2021-34389
2021-06-21 21:35:19
cnvd
cnvd
NVIDIA OTE Buffer Overflow Vulnerability
2021-08-12 00:00:00
cve
cve
CVE-2021-34389
2021-06-21 22:15:07
prion
prion
Design/Logic Flaw
2021-06-21 22:15:00
nvidia
nvidia
Security Bulletin: NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, Jetson TX1, Jetson TX2 Series (including Jetson TX2 NX), and Jetson Nano (including Jetson Nano 2GB) - June 2021
2021-06-18 00:00:00

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:M/Au:N/C:P/I:N/A:N

5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

0.0004 Low

EPSS

Percentile

15.8%

JSON
Related for NVD:CVE-2021-34389
cvelist1cnvd1cve1prion1nvidia1