CVSS: 4.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-0133
https://notcve.org/view.php?id=CVE-2024-0133
26 Sep 2024 — NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to data tampering. • https://nvidia.custhelp.com/app/answers/detail/a_id/5582 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 9.0EPSS: 3%CPEs: 1EXPL: 4CVE-2024-0132 – NVIDIA Container Toolkit 1.16.1 - Time-of-check Time-of-Use (TOCTOU)
https://notcve.org/view.php?id=CVE-2024-0132
26 Sep 2024 — NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. • https://packetstorm.news/files/id/190141 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •