Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-0133

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.

Published

2024-09-26T06:15:04.053

Last Modified

2024-10-02T14:43:22.433

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 4.1 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-367
  • Type: Primary
    CWE-367
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application nvidia nvidia_container_toolkit < 1.16.2 Yes
Operating System linux linux_kernel - No
Application nvidia nvidia_gpu_operator < 24.6.2 Yes
Operating System linux linux_kernel - No
References