NVIDIA ConnectX/BlueField Firmware CVE-2024-0105/0106 Vulnerability Advisory

From this webpage screenshot, the following key information about the vulnerabilities can be obtained: 1. Vulnerability Description: - CVE-2024-0105: A vulnerability exists in NVIDIA ConnectX Firmware, which attackers may exploit to cause denial of service, data tampering, and limited information disclosure. - CVE-2024-0106: A vulnerability exists in NVIDIA ConnectX Host Firmware for BlueField Data Processing Unit (DPU), which attackers may exploit to cause denial of service, data tampering, and limited information disclosure. 2. Vulnerability Impact: - Denial of service, data tampering, and limited information disclosure. 3. Vulnerability Severity: - High. 4. Exploit Vector: - AV:A/AC:L/PR:L/UI:N/S:C:L/I:H/A:H: Attack Vector: Local, Attack Complexity: Low, Privileges Required: Local, User Interaction: None, Scope: Changed, Integrity Impact: High, Availability Impact: High. 5. Affected Products: - ConnectX4, ConnectX4 LX, ConnectX GA, ConnectX LTS22, ConnectX LTS23, BlueField 1, BlueField GA, BlueField LTS22, BlueField LTS23. 6. Affected Versions: - All versions prior to 12.28.2302, All versions prior to xx.32.1900, All versions prior to xx.41.1000, All versions prior to xx.35.4030, All versions prior to xx.39.3560. 7. Updated Versions: - 12.28.2302 or later, xx.32.1900 or later, xx.41.100梁 or later, xx.35.4030 or later, xx.39.3560 or later. 8. Security Updates: - NVIDIA Enterprise Support Portal: Provides downloads and installation instructions for security updates. 9. Security Update Notifications: - NVIDIA Product Security: Offers notifications and subscription options for security updates. 10. Security Update History: - Initial release: Initial release. 11. Support Information: - NVIDIA Support: Provides technical support and assistance. This information helps users understand the latest security vulnerabilities in NVIDIA ConnectX and BlueField Data Processing Units, as well as how to protect their systems by updating software.

Goal Reached Thanks to every supporter — we hit 100%!

NVIDIA ConnectX/BlueField Firmware CVE-2024-0105/0106 Vulnerability Advisory