CVE-2021-34374

CWE-20 — Improper Input Validation3 documents3 sources
Severity
6.7MEDIUM
EPSS
0.1%
top 80.97%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Nvidia Jetson Linux
Timeline
PublishedJun 30
Latest updateMay 24

Description

Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:HExploitability: 1.1 | Impact: 6.0

Affected Packages1 packages

▶NVDnvidia/jetson_linux< 32.5.1

🔴Vulnerability Details

2
GHSA
GHSA-6hqh-63cg-wv9p: Trusty contains a vulnerability in command handlers where the length of input buffers is not verified↗2022-05-24
▶
CVEList
CVE-2021-34374: Trusty contains a vulnerability in command handlers where the length of input buffers is not verified↗2021-06-30
▶
CVE-2021-34374 (MEDIUM CVSS 6.7) | Trusty contains a vulnerability in | cvebase.io