CVE-2017-6278
High
Description
NVIDIA Tegra kernel contains a vulnerability in the CORE DVFS Thermal driver where there is the potential to read or write a buffer using an index or pointer that references a memory location after the end of the buffer, which may lead to a denial of service or possible escalation of privileges.
SeverityHigh
CVSS7.8
Exploit probability—
ProductNvidia Tegra K1 Firmware
PublishedMar 26, 2018
First seenMar 26, 2018
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nvidia tegra_k1_firmware | v ≤ 21.6 | — |
| nvidia jetson_tx1_firmware | v ≤ 24.2.2, v ≤ 28.1 | — |
| nvidia jetson_tk1_firmware | v ≤ 21.6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.