Skip to content
OpenAdvisories
High · 8.9 CVE-2024-0105 EUVD-2024-15906GHSA-cp5j-wrwq-37jx

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A succ…

Published Nov 1, 2024 · Updated Nov 1, 2024 · Assigned by nvidia

Description

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Affected products

VendorProductAffectedFixed
NVIDIA ConnectX4 All versions prior to 12.28.2302 —
NVIDIA ConnectX4 LX All versions prior to xx.32.1900 —
NVIDIA ConnectX GA All versions prior to xx.41.1000 —
NVIDIA ConnectX LTS22 All versions prior to xx.35.4030 —
NVIDIA ConnectX LTS23 All versions prior to xx.39.3560 —
NVIDIA BlueField 1 All versions prior to 18.31.1014 —
NVIDIA BlueField GA All versions prior to xx.41.1000 —
NVIDIA BlueField LTS22 All versions prior to xx.35.4030 —
NVIDIA BlueField LTS23 All versions prior to xx.39.3560 —

References