PT-2019-17807 · Nvidia · Linux For Tegra+2

Publicado 2019-04-11 · Atualizado 2019-04-25 · CVE-2019-5672

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson TX1 and TX2 versions prior to R28.3

Description The issue concerns the Linux for Tegra (L4T) operating system where the Secure Shell (SSH) keys provided in the sample rootfs are not replaced by unique host keys after sample rootfs generation and flashing. This may lead to information disclosure.

Recommendations For versions prior to R28.3, replace the SSH keys provided in the sample rootfs with unique host keys to prevent potential information disclosure.

Correção

Enumeração de Fraquezas

CWE-320

Identificadores relacionados

CVE-2019-5672

Produtos afetados

Linux For Tegra

Nvidia Jetson Tx1

Nvidia Jetson Tx2

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-5672 · Nota de Segurança
• https://nvidia.custhelp.com/app/answers/detail/a_id/4787 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-5672 · Aviso do Fabricante