CVE-2024-0133

LOW EPSS 15.0%

Published Sep 26, 20241y ago · Modified Jun 17, 20262w ago

3.4 CVSS 3.1

Low

Published Sep 26, 2024 1y ago

Last Modified Jun 17, 2026 2w ago

Description

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.

CVSS Details

Base Score

3.4

Exploitability

1.6

Impact

1.4

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction Required

Scope Changed

Confidentiality None

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

15.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-367

Affected Products 4

Vendor	Product	Version	Range
nvidia	nvidia_container_toolkit	*	<1.16.2
linux	linux_kernel	*	any
nvidia	nvidia_gpu_operator	*	<24.6.2
linux	linux_kernel	*	any

References 1

nvidia.custhelp.com https://nvidia.custhelp.com/app/answers/detail/a_id/5582

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.