CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:LCVE-2024-0137
Medium (6.5) in nvidia. EPSS 0.3% chance of exploitation in the next 30 days.
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 26% of CVEs (scores of 2026-10-31)
- CWE
- CWE-653
- Published
- Modified
- Record from
- the NVD, synced
Affected
- nvidia:nvidia_container_toolkit
- nvidia:nvidia_gpu_operator