NVIDIA Cumulus Linux vulnerabilities

NVIDIA Cumulus Linux contains a vulnerability in the LLDP daemon, where an unauthenticated attacker on an adjacent network could cause a buffer overflow by sending crafted LLDP frames. Successful exploitation may lead to code execution.

NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could exploit improper privilege management. Successful exploitation may lead to privilege escalation.

NVIDIA Cumulus Linux and NVOS products contain a vulnerability where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users.