CVE-2024-0133: GO-2024-3237 - NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia

CVE-2024-0133 · Severity: low · CVSS 3.1 · Published 2024-11-04

Technologies: github.com/NVIDIA/nvidia-container-toolkit (Go). Vendors: Go.

Executive brief

NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system in github.com/NVIDIA/nvidia-container-toolkit

Affected products

Go github.com/NVIDIA/nvidia-container-toolkit

Related threats

GO-2025-3998 - NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook in github.com/NVIDIA/gpu-operator
GO-2025-3992 - NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path in github.com/NVIDIA/gpu-operator
GO-2024-3239 - NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability in github.com/NVIDIA/nvidia-container-toolkit
Duplicate Advisory: NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system
Duplicate Advisory: NVIDIA Container Toolkit contains a Time-of-check Time-of-Use (TOCTOU) vulnerability