NVIDIA Cumulus Linux and NVOS products contain a vulnerability in the NVUE interface, where a low-privileged user could inject a command. A successful exploit of this vulnerability might lead to escalation of privileges.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Cumulus Linux GA
Vendor
NVIDIA
Product
Cumulus Linux GA
Platforms
Cumulus Linux(5.14)
Default status
unaffected
Cumulus Linux GA · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 5.14 (5.13.x, 5.12.x, and older GA versions)
affected
Unavailable
Unavailable
Unavailable
None listed
Cumulus Linux LTS
Vendor
NVIDIA
Product
Cumulus Linux LTS
Platforms
Cumulus Linux(5.11)
Default status
unaffected
Cumulus Linux LTS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions prior to 5.11.4
affected
Unavailable
Unavailable
Unavailable
None listed
Cumulus Linux LTS
Vendor
NVIDIA
Product
Cumulus Linux LTS
Platforms
Cumulus Linux(5.9)
Default status
unaffected
Cumulus Linux LTS · Scoped product and version facts