CVE-2024-0101

State: Published
Severity: 7.5 High
Published: Aug 8, 2024
Updated: Aug 8, 2024
Reserved: Dec 2, 2023

Description

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	nvidia

Weaknesses

CWE-693 Protection Mechanism Failure

Affected Products

Product	Versions
Mellanox OSNVIDIA	All versions prior to and including 3.11.1000Affected
ONYXNVIDIA	All versions prior to and including 3.10.4300Affected
SkywayNVIDIA	All versions prior to and including 8.2.1000Affected
SkywayNVIDIA	All versions prior to and including 8.1.4300Affected
MetroX-3 XCNVIDIA	All versions prior to and including 18.2.1000Affected
MetroX-2NVIDIA	All versions prior to and including 3.11.1000Affected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5559

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.