CVE-2024-0137
published 2025-01-28CVE-2024-0137: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the…
PriorityP433medium6.5CVSS 3.1
AVNACLPRLUIRSCCLILAL
EPSS
0.32%
23.8th percentile
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nvidia | nvidia_container_toolkit | < 1.17.3 | 1.17.3 |
| nvidia | nvidia_container_toolkit | — | — |
| nvidia | nvidia_gpu_operator | < 24.9.1 | 24.9.1 |
| nvidia | nvidia_gpu_operator | — | — |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit
vendor_redhat·2025-01-28·CVSS 5.5
CVE-2024-0137 [MEDIUM] CWE-653 nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit
nvidia-container-toolkit: Improper Isolation or Compartmentalization in NVIDIA Container Toolkit
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.
A flaw was found in the NVIDIA Container Toolkit. NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configur
GHSA
GHSA-frhw-w3wm-6cw4: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running i
ghsa_unreviewed·2025-01-28
CVE-2024-0137 [MEDIUM] CWE-653 GHSA-frhw-w3wm-6cw4: NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running i
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-01-28
Published