NVIDIA Container Toolkit: Improper Isolation or Compartmentalization
CVE-2024-0135 is a high-severity improper isolation or compartmentalization vulnerability in NVIDIA Container Toolkit from NVIDIA, with a CVSS 3.1 base score of 7.6 out of 10. It can be exploited remotely over the network by an attacker with administrator privileges, but only if a user takes part, for example by opening a link or file. Affected NVIDIA Container Toolkit versions: All versions up to and including v1.17.0. The record does not name a fixed version, so check the vendor advisory. There is no confirmed exploitation so far. EPSS estimates a 1.1% chance of exploitation within 30 days, higher than 66% of scored CVEs.
High severity with no evidence of exploitation so far.
What to do
- Check which version of NVIDIA Container Toolkit you run against the affected versions below, and install the vendor's latest release.
- Read the advisory on nvidia.custhelp.com for workarounds and exact fixed builds.
- Because the attack needs a user to take part, warn users about unexpected links and files related to this product until it is patched.
Affected products and versions
| Vendor | Product | Affected versions | Fixed in |
|---|---|---|---|
| NVIDIA | NVIDIA Container Toolkit | All versions up to and including v1.17.0 | Not stated |
| NVIDIA | NVIDIA GPU Operator | All versions up to and including 24.9.0 | Not stated |
Version data comes from the organisation that assigned the CVE. Confirm against the vendor advisory before deciding you are unaffected.
How the severity score breaks down
- Attack vector
- NetworkCan be exploited remotely over a network, including the internet.
- Attack complexity
- HighSuccess depends on conditions outside the attacker's control.
- Privileges required
- HighAdministrator-level access is required first.
- User interaction
- RequiredA user must take an action such as opening a file or link.
- Scope
- ChangedThe attack can reach beyond the vulnerable component into other systems.
- Confidentiality
- HighAll data handled by the component can be read.
- Integrity
- HighData or code can be modified at will.
- Availability
- HighThe component can be taken down completely.
Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H. Scored by NVD.
| Scoring system | Score | Severity | Scored by |
|---|---|---|---|
| CVSS 3.1 | 7.6 | High | CNA (nvidia.com) |
| CVSS 3.1 | 7.6 | High | NVD |
Official description
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Source: the CVE record as published by its numbering authority, via NVD and CVE.org.
The underlying weakness: Improper Isolation or Compartmentalization
The product does not properly compartmentalize or isolate functionality, processes, or resources that require different privilege levels, rights, or permissions.
How developers prevent this class of flaw
- Break up privileges between different modules, objects, or entities. Minimize the interfaces between modules and require strong access control between them.
More Improper Isolation or Compartmentalization vulnerabilities (CWE-653)
Timeline
- CVE record published.
- CISA published its SSVC assessment (exploitation: none, automatable: no, technical impact: total).
- Record last changed materially (score, affected products, status or references).
References
Advisories
Other vulnerabilities in NVIDIA Container Toolkit
- 8.1 High severity
- 8.4 High severity
- 8.3 High severity
Recent Improper Isolation or Compartmentalization vulnerabilities
- 8.8 High severity
- 8.2 High severity
- 8.1 High severity
Spotted an error? Tell us.