NVIDIA’s Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure

Published 7 y ago 2019-06-05 · modified 4 mo ago 2026-06-17 · JSON

CVSS

8.2

v3.0 · CNA

CISA KEV

not known exploited

EPSS

0.4%

percentile 37%

Public exploits

none known

NVIDIA Vibrante Linux version 1.1, 2.0, and 2.2 contains a vulnerability in the user space driver in which protection mechanisms are insufficient, may lead to denial of service or information disclosure.

Exploit prediction (EPSS)

0.42% probability of exploitation in the next 30 days, higher than 37% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	8.2	`CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H`
CNA	3.0	8.2	`CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H`
NVD	3.0	7.8	`CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	4.6	`AV:L/AC:L/Au:N/C:P/I:P/A:P`

Affected products

NVIDIA NVIDIA Vibrante Linux

Classification

Weakness

CWE-693 Protection Mechanism Failure
CWE-20 Improper Input Validation

References

data.hackinn.com /ppt/BlackHat-USA-2018/us-18-Liu-Over-The-Air-How-We-Remotely-Compromised-The-Gateway-Bcm- · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2017-6261
NVD: CVE-2017-6261

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary