PT-2020-18864
CVE-2020-5974
·
Published
2020-07-08
·
Updated
2020-07-14
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
NVIDIA JetPack SDK versions 4.2 through 4.3
Description
The issue is related to incorrect permissions set on certain directories by the installation scripts, potentially leading to escalation of privileges.
Recommendations
For NVIDIA JetPack SDK versions 4.2 through 4.3, manually correct the permissions on the affected directories to prevent privilege escalation.
As a temporary workaround, consider restricting access to the affected directories until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾