CVE-2024-0101

NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*
OR cpe:2.3:h:nvidia:tq8100-hs2f:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:tq8200-hs2f:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*
cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*
cpe:2.3:h:nvidia:mga100-hs2:-:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:mtq8400-hs2r:-:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*

History

26 Dec 2024, 19:44

Type Values Removed Values Added
CPE cpe:2.3:h:nvidia:skyway:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:metrox-2:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:metrox-3_xc:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:mtq8400-hs2r:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:mga100-hs2:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:tq8200-hs2f:-:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:tq8100-hs2f:-:*:*:*:*:*:*:*
First Time Nvidia tq8200-hs2f
Nvidia tq8100-hs2f
Nvidia mtq8400-hs2r
Nvidia mga100-hs2

16 Sep 2024, 19:24

Type Values Removed Values Added
CWE NVD-CWE-Other
First Time Nvidia metrox-2
Nvidia nvda-os Xc
Nvidia mlnx-os
Nvidia metrox-3 Xc
Nvidia skyway
Nvidia mlnx-gw
Nvidia
Nvidia onyx
References () https://nvidia.custhelp.com/app/answers/detail/a_id/5559 - () https://nvidia.custhelp.com/app/answers/detail/a_id/5559 - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CPE cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:lts:*:*:*
cpe:2.3:o:nvidia:mlnx-gw:*:*:*:*:-:*:*:*
cpe:2.3:h:nvidia:metrox-3_xc:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:nvda-os_xc:*:*:*:*:*:*:*:*
cpe:2.3:h:nvidia:metrox-2:-:*:*:*:*:*:*:*
cpe:2.3:o:nvidia:onyx:*:*:*:*:lts:*:*:*
cpe:2.3:o:nvidia:mlnx-os:*:*:*:*:-:*:*:*
cpe:2.3:h:nvidia:skyway:-:*:*:*:*:*:*:*

08 Aug 2024, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-08-08 17:15

Updated : 2024-12-26 19:44


NVD link : CVE-2024-0101

Mitre link : CVE-2024-0101


JSON object : View

Products Affected

nvidia

  • mtq8400-hs2r
  • mlnx-gw
  • tq8100-hs2f
  • tq8200-hs2f
  • onyx
  • mlnx-os
  • mga100-hs2
  • nvda-os_xc