PT-2022-3153 · Nvidia · Nvidia Jetson Linux Driver Package

Galen Schretlen · Published 2022-03-30 · Updated 2022-10-14 · CVE-2022-28194

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L

Name of the Vulnerable Software and Affected Versions NVIDIA Jetson Linux Driver Package (affected versions not specified)

Description The issue is related to a buffer overflow in the Cboot module tegrabl cbo.c of the NVIDIA Jetson Linux Driver Package. If TFTP is enabled, a local attacker with elevated privileges can cause a memory buffer overflow, potentially leading to code execution, loss of integrity, limited denial of service, and some impact to confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2022-03833

CVE-2022-28194

Affected Products

Nvidia Jetson Linux Driver Package

References · 7

• https://bdu.fstec.ru/vul/2022-03833 · Security Note
• https://osv.dev/vulnerability/CVE-2022-28194 · Vendor Advisory
• https://nvidia.custhelp.com/app/answers/detail/a_id/5343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28194 · Security Note
• https://t.me/cibsecurity/41533 · Telegram Post
• https://vuldb.com/?id.198585 · Note
• https://cybersecurity-help.cz/vdb/SB2022042626 · Note