NVIDIA SNAP-4 Container Denial-of-Service Vulnerability via Incorrect Buffer Size Calculation

A denial-of-service vulnerability has been identified in NVIDIA SNAP-4 Container, specifically in the configuration interface. An attacker on a virtual machine can exploit this vulnerability by sending crafted configurations that cause an incorrect calculation of buffer sizes. This exploitation can lead to a crash of the SNAP service, disrupting the storage service on the host.

Impact

Exploitation of this vulnerability causes the SNAP service to crash, leading to a denial-of-service condition for the storage service on the host.

Remediation

Users can upgrade to NVIDIA SNAP-4.9.1 or SNAP-4.5.5 to address this vulnerability.