CVSS 3.1
3.4 lowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:NCVE-2024-0133
Low (3.4) in nvidia. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in github.com/NVIDIA/nvidia-container-toolkit 1.16.2.
NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
- CWE
- CWE-367
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nvidia:nvidia_container_toolkit
- nvidia:nvidia_gpu_operator
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-f748-7hpg-88ch | Go | github.com/NVIDIA/nvidia-container-toolkit | <1.16.2 | 1.16.2 |
| GO-2024-3237 | Go | github.com/NVIDIA/nvidia-container-toolkit | <1.16.2 | 1.16.2 |