CVE-2024-0134

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

Score

CVSS 3.1 4.1 Medium

Status

Analyzed - psirt@nvidia.com

Published

2024-11-05

Last modified

2024-11-05

Weaknesses

CWE-61

Affected products

• Nvidia Container Toolkit (Nvidia)
• Nvidia Gpu Operator (Nvidia)

References

• https://nvidia.custhelp.com/app/answers/detail/a_id/5585