Skip to content
OpenAdvisories
High · 7.5 CVE-2023-25525 EUVD-2023-29477GHSA-g4pv-fp7j-xm38

NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/D…

Published Sep 20, 2023 · Updated Sep 24, 2024 · Assigned by nvidia

Description

NVIDIA Cumulus Linux contains a vulnerability in forwarding where a VxLAN-encapsulated IPv6 packet received on an SVI interface with DMAC/DIPv6 set to the link-local address of the SVI interface may be incorrectly forwarded. A successful exploit may lead to information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA Cumulus Linux All versions prior to 5.6.0 —

References