This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2024-0132 | BDVDB-2026-0060 Detail

NVIDIAContainer Toolkit

Description#

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

Impact#

Code execution, denial of service, escalation of privileges, information disclosure, data tampering

Weaknesses#

  • CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.