CVE-2024-0132

The record

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Affected packages

Related vulnerabilities

• GO-2025-3998 NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache… Also affects github.com/NVIDIA/nvidia-container-toolkit
• CVE-2024-10975 Hashicorp Nomad Incorrect Authorization vulnerability Also affects govulncheck-vulndb
• CVE-2024-10086 A vulnerability was identified in Consul and Consul Enterprise such that the server… Also affects govulncheck-vulndb
• CVE-2024-10006 A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using… Also affects govulncheck-vulndb
• CVE-2024-10005 A vulnerability was identified in Consul and Consul Enterprise (“Consul”) such that using… Also affects govulncheck-vulndb
• CVE-2024-10452 Grafana org admin can delete pending invites in different org Also affects govulncheck-vulndb
• CVE-2024-9264 Grafana Command Injection And Local File Inclusion Via Sql Expressions Also affects govulncheck-vulndb
• CVE-2024-9486 VM images built with Image Builder and Proxmox provider use default credentials in… Also affects govulncheck-vulndb