medium4.1
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of u…
Impact
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nvidia | Nvidia Container Toolkit | before 1.17 |
| Nvidia | Nvidia Gpu Operator | before 24.9.0 |