Lucene search
+L

4305 matches found

OSV
OSV
added 2022/01/18 6:15 p.m.3 views

CVE-2021-34404

Android images for T210 provided by NVIDIA contain a vulnerability in BROM, where failure to limit access to AHB-DMA when BROM fails may allow an unprivileged attacker with physical access to cause denial of service or impact integrity and confidentiality beyond the security scope of BROM...

7.6CVSS7.1AI score0.00212EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/01/17 12:0 a.m.15 views

Juniper Networks Junos OS Denial of Service Vulnerability (CNVD-2022-06682)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A denial of service vulnerability exists in Juniper Networks Junos OS, which could be exploited by an attacker to cause a...

7.5CVSS7.4AI score0.0093EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/12 12:0 a.m.9 views

NVIDIA SHIELD TV 权限许可和访问控制问题漏洞

Nvidia NVIDIA Shield TV is a streaming media player from Nvidia Corporation. The NVIDIA SHIELD TV suffers from a privilege license and access control issue vulnerability that stems from a failure to restrict AHB-DMA access in the BROM, distributed with the Android image of the NVIDIA-supplied T21...

7.6CVSS7.4AI score0.00212EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/01/12 12:0 a.m.41 views

Juniper Junos OS Vulnerability (JSA11286)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA11286 advisory. - An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA...

7.5CVSS7.7AI score0.0093EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/12/24 12:0 a.m.34 views

CVE-2021-3929

A DMA reentrancy issue was found in the NVM Express Controller NVME emulation in QEMU. This CVE is similar to CVE-2021-3750 and, just like it, when the reentrancy write triggers the reset function nvmectrlreset, data structs will be freed leading to a use-after-free issue. A malicious guest could...

8.2CVSS7.1AI score0.00643EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2021/12/24 12:0 a.m.10 views

PT-2021-22508 · Qemu +6 · Qemu +6

Name of the Vulnerable Software and Affected Versions: QEMU affected versions not specified Description: A DMA reentrancy issue was found in the NVM Express Controller NVME emulation. This issue can lead to a use-after-free problem when a malicious guest triggers the reset function nvme ctrl rese...

8.8CVSS7.2AI score0.02701EPSS
SaveExploits16References236
NVD
NVD
added 2021/12/07 9:15 p.m.22 views

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

7.1CVSS0.0026EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/07 9:15 p.m.6 views

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

7.1CVSS6AI score0.0026EPSS
SaveExploits0References2
OSV
OSV
added 2021/12/07 9:15 p.m.8 views

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

7.1CVSS7.1AI score
SaveExploits0References1
OSV
OSV
added 2021/12/07 9:15 p.m.3 views

DEBIAN-CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

7.1CVSS7.2AI score0.0026EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/07 9:15 p.m.17 views

Design/Logic Flaw

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

3.6CVSS7AI score0.0026EPSS
SaveExploits0References1
OSV
OSV
added 2021/12/07 9:15 p.m.5 views

UBUNTU-CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

7.1CVSS5.9AI score0.0026EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/12/07 8:42 p.m.25 views

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

7.2AI score0.0026EPSS
SaveExploits0References1
CVE
CVE
added 2021/12/07 8:42 p.m.55 views

CVE-2021-36133

The CVE-2021-36133 entry concerns the OPTEE-OS CSU driver for NXP i.MX SoC devices. The root issue is a lack of proper security access configuration for several models, enabling a TrustZone bypass where the NonSecure World can perform arbitrary reads/writes of Secure World memory via a DMA-capabl...

7.1CVSS7AI score0.0026EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2021/12/07 8:42 p.m.56 views

CVE-2021-36133

The OPTEE-OS CSU driver for NXP i.MX SoC devices lacks security access configuration for several models, resulting in TrustZone bypass because the NonSecure World can perform arbitrary memory read/write operations on Secure World memory. This involves a DMA capable peripheral...

7.1CVSS7AI score0.0026EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/11/20 3:15 p.m.3 views

CVE-2021-23217

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or...

7.5CVSS0.00302EPSS
SaveExploits0References2
Prion
Prion
added 2021/11/20 3:15 p.m.20 views

Hardcoded credentials

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or...

6.9CVSS7.5AI score0.00302EPSS
SaveExploits0References1
CVE
CVE
added 2021/11/20 2:55 p.m.64 views

CVE-2021-23217

NVIDIA CVE-2021-23217 affects GPU/Tegra hardware with an internal microcontroller flaw that may let an elevated-privilege user instantiate a DMA write within a specific time window, potentially corrupting code execution and impacting confidentiality, integrity, or availability. Affected architect...

7.5CVSS7.5AI score0.00302EPSS
SaveExploits0References1Affected Software63
Cvelist
Cvelist
added 2021/11/20 2:55 p.m.31 views

CVE-2021-23217

NVIDIA GPU and Tegra hardware contain a vulnerability in the internal microcontroller, which may allow a user with elevated privileges to instantiate a DMA write operation only within a specific time window timed to corrupt code execution, which may impact confidentiality, integrity, or...

7.5CVSS7.8AI score0.00302EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/16 7:15 p.m.7 views

CVE-2021-26337

Insufficient DRAM address validation in System Management Unit SMU may result in a DMA read from invalid DRAM address to SRAM resulting in SMU not servicing further requests...

5.5CVSS6.1AI score0.00233EPSS
SaveExploits0References1
Rows per page
Query Builder