CVE-2024-0132

Summary

CVE-2024-0132 identifies a Time-of-check Time-of-use (TOCTOU) vulnerability in NVIDIA Container Toolkit versions 1.16.1 and earlier, which could allow a crafted container image to access the host file system under default configurations. This vulnerability does not affect use cases that utilize Container Device Interface (CDI). Successful exploitation may lead to serious consequences, including code execution, denial of service, privilege escalation, information disclosure, and data tampering. Remediation involves updating the NVIDIA Container Toolkit to a version later than 1.16.1 to mitigate these risks effectively. Organizations using affected versions are at a high risk due to the potential for significant integrity and confidentiality impacts, with an overall CVSS base score of 8.3 indicating a high severity level.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.