CVE-2024-0134

Public on 2024-11-05
Modified on 2024-11-14
Description
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
Severity
Medium severity
Medium
CVSS v3 Base Score
4.1
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Graphics Extra libnvidia-container No Fix Planned

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
NVD CVSSv3 4.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N