NVIDIA NVIDIA FLARE
5 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-28199 | mlnx_dpdk_19.11_1.*.* through mlnx_dpdk_20.11_1.0.0-4.*.* | NVIDIA’s distribution of the Data Plane Development Kit (MLNX_DPDK) contains a vulnerability in the network stack, where error recovery is n | HIGH 8.6 | 2.3 % | ||
| CVE-2022-34668 | All versions prior to 2.1.4 | NVFLARE, versions prior to 2.1.4, contains a vulnerability that deserialization of Untrusted Data due to Pickle usage may allow an unprivile | CRITICAL 9.8 | 12 % | ||
| CVE-2022-31605 | All versions prior to 2.1.2 | NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml. | CRITICAL 9.8 | 2.1 % | ||
| CVE-2022-31604 | All versions prior to 2.1.2 | NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pi | CRITICAL 9.8 | 2.1 % | ||
| CVE-2022-21822 | All versions prior to 2.0.16 | NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limi | HIGH 7.5 | 1.1 % |