NVIDIA Mellanox OS Security Bulletin: CVE-2024-0101/0104 Vulnerabilities

From this webpage screenshot, the following key vulnerability information can be obtained: 1. Vulnerability Description: - CVE-2024-0101: A vulnerability in the ipfilter component of NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2, and MetroX-3 XC allows attackers to cause a denial of service. - CVE-2024-0104: A vulnerability in the LDAP AAA component of NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2, and MetroX-3 XC allows users to cause information disclosure, data tampering, and privilege escalation. 2. Vulnerability Impact: - CVE-2024-0101: Denial of service (DoS) - CVE-2024-0104: Information disclosure, data tampering, escalation of privileges 3. Affected Products: - Mellanox OS - ONYX - Skyway - MetroX-2 - MetroX-3 XC 4. Affected Versions: - Mellanox OS: All versions up to 3.11.1000 - ONYX: All versions up to 3.10.4300 - Skyway: All versions up to 8.2.1000 - MetroX-2: All versions up to 3.11.1000 - MetroX-3 XC: All versions up to 18.2.2100 5. Updated Versions: - Mellanox OS: 3.11.2002 - ONYX: 3.10.4402 - Skyway: 8.2.2200 - MetroX-2: 3.11.2002 - MetroX-3 XC: 18.2.2200 6. Security Update: - This update covers multiple versions of NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2, and MetroX-3 XC. This information helps users understand the critical security vulnerabilities present in NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2, and MetroX-3 XC, and enables them to promptly update their systems to protect against potential threats.

Goal Reached Thanks to every supporter — we hit 100%!

NVIDIA Mellanox OS Security Bulletin: CVE-2024-0101/0104 Vulnerabilities