VDB
BDU%3A2024-07816
BDU%3A2024-07816
PUBLISHED
CVSS 9 CRITICAL
Уязвимость программного обеспечения для создания и запуска контейнеров NVIDIA Container Toolkit и программного средства для управления ресурсами NVIDIA GPU Operator, позволяющая нарушителю повысить свои привилегии или выполнить произвольный код
Risk Scores
CVSS 3.1
9
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| nvidia | gpu_operator | 0 |
| NVIDIA | Container Toolkit | All versions up to and including v1.16.1 |
| nvidia | container_toolkit | 0 |
| NVIDIA | GPU Operator | All versions up to and including 24.6.1 |
| ООО «Ред Софт», NVIDIA Corp. | РЕД ОС (запись в едином реестре российских программ №3751), NVIDIA Container Toolkit, NVIDIA GPU Operator |
Timeline
- Sep 26, 2024 CVE Published
- Sep 26, 2024 PoC Published
- Sep 27, 2024 PoC Published
- Sep 27, 2024 PoC Published
- Sep 27, 2024 PoC Published
- Sep 27, 2024 PoC Published
- Sep 27, 2024 PoC Published
- Sep 30, 2024 PoC Published
- Oct 1, 2024 PoC Published
- Feb 11, 2025 PoC Published
- Feb 11, 2025 PoC Published
- Feb 11, 2025 PoC Published
References
- https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-nvidia-container-toolkit-28102028/?sphrase_id=1334719 advisory
- https://luntry.ru/lomaem-vashi-videokarty-raspakovka-eksplojta-dlya-cve-2024-0132-pod-nvidia-container-toolkit url
- https://nvidia.custhelp.com/app/answers/detail/a_id/5582 url