Lucene search

K
nvd[email protected]NVD:CVE-2023-25520
HistoryJun 23, 2023 - 6:15 p.m.

CVE-2023-25520

2023-06-2318:15:11
CWE-20
web.nvd.nist.gov
4
nvidia jetson linux driver
vulnerability
denial of service
nvbootctrl

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

4.7

Confidence

High

EPSS

0

Percentile

5.1%

NVIDIA Jetson Linux Driver Package contains a vulnerability in nvbootctrl, where a privileged local attacker can configure invalid settings, resulting in denial of service.

Affected configurations

Nvd
Node
nvidiajetson_linuxRange<32.7.4
AND
nvidiajetson_agx_xavierMatch-
OR
nvidiajetson_tx2Match-
OR
nvidiajetson_tx2_nxMatch-
OR
nvidiajetson_xavier_nxMatch-
VendorProductVersionCPE
nvidiajetson_linux*cpe:2.3:o:nvidia:jetson_linux:*:*:*:*:*:*:*:*
nvidiajetson_agx_xavier-cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*
nvidiajetson_tx2-cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*
nvidiajetson_tx2_nx-cpe:2.3:h:nvidia:jetson_tx2_nx:-:*:*:*:*:*:*:*
nvidiajetson_xavier_nx-cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

4.7

Confidence

High

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2023-25520