CVE-2023-0204

CVE-2023-0204 affects NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX NIC firmware. The issue is described as improper handling of exceptional conditions in the NIC firmware, resulting in denial of service by an unprivileged user. The vulnerability impacts the NIC firmware layer, with potential f...

CVE-2023-0204

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service...

CVE-2023-0204

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can cause improper handling of exceptional conditions, which may lead to denial of service...

CVE-2023-0203

NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denial of service...

CVE-2023-0203

CVE-2023-0203 affects NVIDIA ConnectX firmware on ConnectX-5, ConnectX-6, and ConnectX6-DX. The issue stems from insufficient granularity of access controls in the NIC firmware, enabling an unprivileged user to cause a denial of service. NVIDIA’s security bulletin lists CVE-2023-0203 with base sc...

NVIDIA ConnectX 安全漏洞

NVIDIA ConnectX is a series of intelligent network interface cards from NVIDIA Corporation. A security vulnerability exists in versions prior to NVIDIA ConnectX 35.1012 that originates from an unprivileged user being able to exploit insufficient access control granularity, which could result in a...

PT-2023-16084 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5 affected versions not specified NVIDIA ConnectX-6 affected versions not specified NVIDIA ConnectX6-DX affected versions not specified Description: The issue is related to insufficient granularity of access control in the NIC...

NVIDIA ConnectX 安全漏洞

NVIDIA ConnectX is a series of intelligent network interface cards from NVIDIA Corporation. A security vulnerability exists in versions prior to NVIDIA ConnectX 35.1012 that originates from an unprivileged user being able to exploit insufficient access control granularity, which could result in a...

PT-2023-16082 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX affected versions not specified Description: The issue is related to insufficient granularity of access control in the NIC firmware, which can be exploited by an unprivileged user to potentially...

NVIDIA ConnectX 安全漏洞

NVIDIA ConnectX is a series of intelligent network interface cards from NVIDIA Corporation. A security vulnerability exists in NVIDIA ConnectX versions prior to 35.1012, which originates from an unprivileged user that may result in mishandling of an exception, leading to a denial of service...

PT-2023-16083 · Nvidia · Nvidia Connectx6-Dx +2

Name of the Vulnerable Software and Affected Versions: NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX affected versions not specified Description: The issue is related to improper handling of exceptional conditions in the NIC firmware, which may lead to denial of service. An unprivileged user ca...

Security Bulletin: NVIDIA ConnectX - April 2023

NVIDIA has released a security update for NVIDIA ConnectX® firmware. This update addresses issues that may lead to denial of service. To protect your system, download and install this firmware update from the NVIDIA Networking Support page. Go to NVIDIA Product Security. Details This section...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: stack overflow in doprocdointvec and procskipspaces CVE-2022-4378 ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 kernel: FUSE filesystem low-privileged user...

kernel: dos in mlx5_fw_fatal_reporter_dump() function in drivers/net/ethernet/mellanox/mlx5/core/health.c

A flaw was found in the way the Mellanox 5th generation network adapters ConnectX series core driver in the Linux kernel handled resource cleanup in the mlx5fwfatalreporterdump function. This flaw allows an attacker with the ability to trigger errors in the mlx5crdumpcollect function to crash the...

USN-4225-1 linux, linux-aws, linux-azure, linux-azure-5.3, linux-gcp, linux-gcp-5.3, linux-kvm, linux-oracle, linux-raspi2 vulnerabilities

It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2019-14895, CVE-2019-14901 It was discovered that a...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4225-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4225-1 advisory. It was discovered that a heap-based buffer overflow existed in the Marvell WiFi-Ex Driver for the Linux kernel. A physically proximate attacker could use...

CVE-2019-19047

A flaw was found in the way the Mellanox 5th generation network adapters ConnectX series core driver in the Linux kernel handled resource cleanup in the mlx5fwfatalreporterdump function. This flaw allows an attacker with the ability to trigger errors in the mlx5crdumpcollect function to crash the...

XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP

XNU Kernel - Heap Overflow Due to Bad Bounds Checking in MPTCP mptcpusrconnectx is the handler for the connectx syscall for the APMULTIPATH socket family. The logic of this function fails to correctly handle source and destination sockaddrs which aren't AFINET or AFINET6: // verify salen for...