Skip to content
CVE PROGRAM SOURCE RECORD8.9 High

CVE-2024-0105

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
nvidia

Description

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

NVIDIA ConnectX4

Default version status: unaffected

  • All versions prior to 12.28.2302affected

NVIDIA ConnectX4 LX

Default version status: unaffected

  • All versions prior to xx.32.1900affected

NVIDIA ConnectX GA

Default version status: unaffected

  • All versions prior to xx.41.1000affected

NVIDIA ConnectX LTS22

Default version status: unaffected

  • All versions prior to xx.35.4030affected

NVIDIA ConnectX LTS23

Default version status: unaffected

  • All versions prior to xx.39.3560affected

NVIDIA BlueField 1

Default version status: unaffected

  • All versions prior to 18.31.1014affected

NVIDIA BlueField GA

Default version status: unaffected

  • All versions prior to xx.41.1000affected

NVIDIA BlueField LTS22

Default version status: unaffected

  • All versions prior to xx.35.4030affected

NVIDIA BlueField LTS23

Default version status: unaffected

  • All versions prior to xx.39.3560affected

References