NVIDIA Container Toolkit and NVIDIA GPU Operator for...
Moderate severity
Unreviewed
Published
Nov 5, 2024
to the GitHub Advisory Database
Description
Published by the National Vulnerability Database
Nov 5, 2024
Published to the GitHub Advisory Database
Nov 5, 2024
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.
References