CVE-2018-6269

NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-trusted pointer dereference, which may lead to information disclosure, denial of service, escalation of privileges, or code execution. The updates apply to all versions prior to R28.3.

CVSS v3 7.8 HIGH
CVSS v2.0 4.6 MEDIUM

7.8^/10

CVSS v3 : HIGH

Vector : AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 3.9 / Impact : 6.4

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://nvidia.custhelp.com/app/answers/detail/a_id/4787	Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/4804
https://nvidia.custhelp.com/app/answers/detail/a_id/4787	Vendor Advisory
https://nvidia.custhelp.com/app/answers/detail/a_id/4804

Configurations

Configuration 1 (hide)

cpe:2.3:a:nvidia:jetson_tx2:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:10

Type	Values Removed	Values Added
References	~~() https://nvidia.custhelp.com/app/answers/detail/a_id/4787 - Vendor Advisory~~	() https://nvidia.custhelp.com/app/answers/detail/a_id/4787 - Vendor Advisory
References	~~() https://nvidia.custhelp.com/app/answers/detail/a_id/4804 -~~	() https://nvidia.custhelp.com/app/answers/detail/a_id/4804 -

Information

Published : 2019-04-12 17:29

Updated : 2024-11-21 04:10

NVD link : CVE-2018-6269

Mitre link : CVE-2018-6269

CVE.ORG link : CVE-2018-6269

JSON object : View

Products Affected

nvidia

jetson_tx2

CWE

CWE-732

Incorrect Permission Assignment for Critical Resource

{"id": "CVE-2018-6269", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2019-04-12T17:29:00.413", "references": [{"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4787", "tags": ["Vendor Advisory"], "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4804", "source": "psirt@nvidia.com"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4787", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://nvidia.custhelp.com/app/answers/detail/a_id/4804", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-732"}]}], "descriptions": [{"lang": "en", "value": "NVIDIA Jetson TX2 contains a vulnerability in the kernel driver where input/output control (IOCTL) handling for user mode requests could create a non-trusted pointer dereference, which may lead to information disclosure, denial of service, escalation of privileges, or code execution. The updates apply to all versions prior to R28.3."}, {"lang": "es", "value": "NVIDIA Jetson versi\u00f3n TX2 contiene una vulnerabilidad en el controlador del kernel donde el manejo del control de entrada y salida (IOCTL) para las peticiones de modo de usuario podr\u00eda crear una falta de confianza en la eliminaci\u00f3n del puntero, lo que podr\u00eda conllevar a la revelaci\u00f3n de informaci\u00f3n, denegaci\u00f3n de servicio, escalado de privilegios o ejecuci\u00f3n de c\u00f3digo . Las actualizaciones se aplican a todas las versiones anteriores a R28.3."}], "lastModified": "2024-11-21T04:10:24.737", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:nvidia:jetson_tx2:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1455BBEB-871A-41FE-A4BD-6DC583777252", "versionEndExcluding": "r28.3"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@nvidia.com"}