CNNVD-202509-1165 Information

CNNVD ID

CNNVD-202509-1165

CVE-2025-23344

  • CNNVD Published: 2025-09-09

Description (Chinese)

NVIDIA NVDebug是美国英伟达(NVIDIA)公司的一款调试和诊断工具。 NVIDIA NVDebug存在操作系统命令注入漏洞,该漏洞源于可能导致以非特权用户身份在平台主机上运行代码,进而导致代码执行、拒绝服务、权限提升、信息泄露和数据篡改。

Description (English)

NVIDIA NV Debug is a debugging and diagnostic tool for NVIDIA. NVIDIA NV Debug has an operational system command leak that can lead to the operation of the code on the platform ’ s mainframe as an unprivileged user, leading to code execution, denial of service, enhancement of privileges, information disclosure and data manipulation.

Hazard Level

Medium

Vulnerability Type

操作系统命令注入

Affected Vendor

NZBGet

Published

2025-09-09

Last Modified

2026-02-24

References

https://nvd.nist.gov/vuln/detail/CVE-2025-23344 https://www.cve.org/CVERecord?id=CVE-2025-23344 https://nvidia.custhelp.com/app/answers/detail/a_id/5696 https://access.redhat.com/security/cve/cve-2025-23344

Patch

https://nvidia.custhelp.com/app/answers/detail/a_id/5696

Share on: