CVE-2024-0137: Medium severity nvidia container toolkit vulnerability
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-0137?
CVE-2024-0137 has a high severity rating due to the potential for untrusted code execution in the host's network namespace.
How do I fix CVE-2024-0137?
To fix CVE-2024-0137, ensure that the NVIDIA Container Toolkit is configured using default settings.
What hardware is affected by CVE-2024-0137?
CVE-2024-0137 affects systems running the NVIDIA Container Toolkit with nondefault configurations.
Can CVE-2024-0137 be exploited remotely?
Yes, CVE-2024-0137 can potentially be exploited by an attacker who has access to create a specially crafted container image.
What are the implications of CVE-2024-0137?
The implications of CVE-2024-0137 include increased risk of privilege escalation and unauthorized access to host resources.