阿里云漏洞库

漏洞描述

NVIDIA Jetson contains a vulnerability in CBoot, where the PCIe controller is initialized without IOMMU, which may allow an attacker with physical access to the target device to read and write to arbitrary memory. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and loss of integrity.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
https://https://nvidia.custhelp.com/app/answers/detail/a_id/5468

受影响软件情况

1
#	类型	厂商	产品	版本	影响面
	运行在以下环境
	应用	nvidia	cloud_gaming	*		Up to (excluding) 531.79
	运行在以下环境
	应用	nvidia	geforce	-	-
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 450	Up to (excluding) 450.248.02
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 450	Up to (excluding) 454.23
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 470	Up to (excluding) 470.199.02
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 470	Up to (excluding) 474.44
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 525	Up to (excluding) 525.125.06
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 525	Up to (excluding) 529.11
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 530	Up to (excluding) 535.54.03
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 530	Up to (excluding) 536.23
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 530	Up to (excluding) 536.25
	运行在以下环境
	应用	nvidia	gpu_display_driver	*	From (including) 530	Up to (excluding) 536.40
	运行在以下环境
	应用	nvidia	nvs	-	-
	运行在以下环境
	应用	nvidia	quadro	-	-
	运行在以下环境
	应用	nvidia	rtx	-	-
	运行在以下环境
	应用	nvidia	studio	-	-
	运行在以下环境
	应用	nvidia	tesla	-	-
	运行在以下环境
	应用	nvidia	virtual_gpu	*		Up to (excluding) 11.12
	运行在以下环境
	应用	nvidia	virtual_gpu	*	From (including) 13.0	Up to (excluding) 13.7
	运行在以下环境
	应用	nvidia	virtual_gpu	*	From (including) 15.0	Up to (excluding) 15.2
	运行在以下环境
	系统	debian_12	kernel	*		Up to (excluding) 525.125.06-1~deb12u1

攻击路径

本地
攻击复杂度

复杂
权限要求

普通权限
影响范围

越权影响
EXP成熟度

未验证
补丁情况

官方补丁
数据保密性

无影响
数据完整性

无影响
服务器危害

无影响
全网数量

N/A

CWE-ID	漏洞类型
NVD-CWE-Other

中危 gpu_display_driver 安全漏洞 (CVE-2023-25515)

漏洞描述

解决建议

参考链接

受影响软件情况