CVE-2024-0137

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Jan 28, 2025
CWE ID 653

Summary

CVE-2024-0137 is a newly discovered vulnerability affecting NVIDIA Container Toolkit. This issue involves an improper isolation flaw that can allow a maliciously crafted container image to execute untrusted code in the host's network namespace. The risk is heightened when the NVIDIA Container Toolkit is configured in a nonstandard manner. A successful exploit could potentially result in denial-of-service attacks and privilege escalation. Users are urged to update their NVIDIA Container Toolkit to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Container Toolkit

Affected Vendors

  • NVIDIA