NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
References
Link | Resource |
---|---|
https://nvidia.custhelp.com/app/answers/detail/a_id/5585 | Vendor Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
08 Nov 2024, 15:53
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:* cpe:2.3:a:nvidia:nvidia_container_toolkit:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* |
|
First Time |
Linux
Linux linux Kernel Nvidia Nvidia nvidia Container Toolkit Nvidia nvidia Gpu Operator |
|
CWE | NVD-CWE-Other | |
References | () https://nvidia.custhelp.com/app/answers/detail/a_id/5585 - Vendor Advisory |
06 Nov 2024, 18:17
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
05 Nov 2024, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-11-05 19:15
Updated : 2024-11-08 15:53
NVD link : CVE-2024-0134
Mitre link : CVE-2024-0134
CVE.ORG link : CVE-2024-0134
JSON object : View
Products Affected
nvidia
- nvidia_container_toolkit
- nvidia_gpu_operator
linux
- linux_kernel
CWE