CVE-2024-0134 — Vulnetix

Try Vulnetix Request Demo

CVE-2024-0134 PUBLISHED CVSS 4.099999904632568 MEDIUM

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

EPSS 0.23% · 46.0th percentile

Risk Scores

CVSS v3.1

4.099999904632568

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N

EPSS Score

0.23%

46.0th percentile

Affected Products

Vendor	Product	Versions
nvidia	nvidia_container_toolkit	0
NVIDIA	NVIDIA GPU Operator	All versions up to and including 24.6.2
nvidia	nvidia_gpu_operator	0
NVIDIA	NVIDIA Container Toolkit	All versions up to and including v1.16.2

Timeline

Nov 5, 2024 Coalition ESS Score
Nov 5, 2024 CVE Published
Nov 5, 2024 CVE Updated
Nov 6, 2024 EPSS Score
Nov 6, 2024 Coalition ESS Score
Nov 8, 2024 Coalition ESS Score
Nov 23, 2024 EPSS Score
Dec 12, 2024 EPSS Score
Dec 29, 2024 EPSS Score
Jan 15, 2025 EPSS Score
Feb 2, 2025 EPSS Score
Feb 19, 2025 EPSS Score

References

Open in Interactive Console →