CVE-2024-0133
EUVD-2024-302626.09.2024, 06:15
NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| nvidia | nvidia_container_toolkit | 𝑥 < 1.16.2 |
| nvidia | nvidia_gpu_operator | 𝑥 < 24.6.2 |
𝑥
= Vulnerable software versions
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| libnvidia-container-devel |
| ||||||||||||||
| libnvidia-container-static |
| ||||||||||||||
| libnvidia-container-tools |
| ||||||||||||||
| libnvidia-container1 |
| ||||||||||||||
| nvidia-container-toolkit |
|