CVE-2024-0106

State: Published
Severity: 8.7 High
Published: Nov 1, 2024
Updated: Nov 1, 2024
Reserved: Dec 2, 2023

Description

NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Scores

CVSS	Score	Vector	Source
3.1	8.7 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H	nvidia

Weaknesses

CWE-274

Affected Products

Product	Versions
BlueField 1NVIDIA	All versions prior to 18.31.1014Affected
BlueField GANVIDIA	All versions prior to xx.41.1000Affected
BlueField LTS22NVIDIA	All versions prior to xx.35.4030Affected
BlueField LTS23NVIDIA	All versions prior to xx.39.3560Affected

References

https://nvidia.custhelp.com/app/answers/detail/a_id/5562

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.