Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2024-0137: NVIDIA Container Toolkit: Untrusted Code Running on Host Network
CVE-2024-0137 · published 1 year ago
Summary
A misconfigured NVIDIA Container Toolkit can allow untrusted code in a container to access the host's network settings. This could lead to a denial of service or allow unauthorized access to the host. To mitigate this risk, ensure the NVIDIA Container Toolkit is configured securely and review your container setup.
What to do
- Update nvidia nvidia_container_toolkit to version 1.17.3 or later.
- Update nvidia nvidia_gpu_operator to version 24.9.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| nvidia | nvidia_container_toolkit |
< 1.17.3 cpe:2.3:a:nvidia:nvidia_container_toolkit:*:*:*:*:*:*:*:* |
| nvidia | nvidia_gpu_operator |
< 24.9.1 cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:* |
Original advisory text
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerabil...
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.
References
- https://nvidia.custhelp.com/app/answers/detail/a_id/5599 Mitigation Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-653Improper Isolation or Compartmentalization
Timeline
Published28 Jan 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-0137 · NVD
Track software like this
Free during beta