CVE-2021-34374
Last modified
CVE-2021-34374 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
Trusty contains a vulnerability in command handlers where the length of input buffers is not verified. This vulnerability can cause memory corruption, which may lead to information disclosure, escalation of privileges, and denial of service.
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Nvidia | Jetson Linux | < 32.5.1 |
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
- https://nvidia.custhelp.com/app/answers/detail/a_id/5205Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-34374?
How severe is CVE-2021-34374?
How do I fix CVE-2021-34374?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-34369portlets/contact/ref/refContactDetail.do in Accela Civic Pla…6.5
- CVE-2021-3437Potential security vulnerabilities have been identified in a…9.8
- CVE-2021-34370Accela Civic Platform through 20.1 allows ssoAdapter/logoutA…6.1
- CVE-2021-34371Neo4j through 3.4.18 (with the shell server enabled) exposes…9.8
- CVE-2021-34372Trusty (the trusted OS produced by NVIDIA for Jetson devices…7.8
- CVE-2021-34373Trusty trusted Linux kernel (TLK) contains a vulnerability i…6
- CVE-2021-34375Trusty contains a vulnerability in all trusted applications …6.7
- CVE-2021-34376Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34377Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34378Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-34379Trusty contains a vulnerability in the HDCP service TA where…6.7
- CVE-2021-3438A potential buffer overflow in the software drivers for cert…7.8
Are you affected by CVE-2021-34374?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST