CVE-2024-0101

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*
cpe:2.3:h:nvidia:metrox-2:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*
cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*
cpe:2.3:h:nvidia:skyway:-:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:metrox-3_xc:-:*:*:*:*:*:*:*

History

16 Sep 2024, 19:24

Type Values Removed Values Added
First Time Nvidia mlnx-os
Nvidia metrox-3 Xc
Nvidia skyway
Nvidia nvda-os Xc
Nvidia onyx
Nvidia
Nvidia metrox-2
Nvidia mlnx-gw
CWE NVD-CWE-Other
Summary
  • (es) NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 y MetroX-3 XC contienen una vulnerabilidad en ipfilter, donde definiciones incorrectas de ipfilter podrían permitir que un atacante cause una falla al atacar el conmutador. Una explotación exitosa de esta vulnerabilidad podría provocar una denegación de servicio.
CPE cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*
cpe:2.3:h:nvidia:skyway:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:metrox-2:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*
cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*
cpe:2.3:h:nvidia:metrox-3_xc:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5559 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5559 - Vendor Advisory

08 Aug 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-08 17:15

Updated : 2024-09-16 19:24


NVD link : CVE-2024-0101

Mitre link : CVE-2024-0101

CVE.ORG link : CVE-2024-0101


JSON object : View

Products Affected

nvidia

  • metrox-3_xc
  • mlnx-os
  • skyway
  • mlnx-gw
  • nvda-os_xc
  • onyx
  • metrox-2
CWE
NVD-CWE-Other CWE-693

Protection Mechanism Failure