Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7jm9-xpwx-v999

Опубликовано: 05 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 4.1

Описание

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

EPSS

Процентиль: 30%
0.00112
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-61

Связанные уязвимости

CVSS3: 4.1
redhat
около 1 года назад

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

CVSS3: 4.1
nvd
около 1 года назад

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

CVSS3: 4.1
msrc
11 месяцев назад

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host.

CVSS3: 4.1
fstec
около 1 года назад

Уязвимость программного обеспечения для создания и запуска контейнеров NVIDIA Container Toolkit и программного средства для управления ресурсами NVIDIA GPU Operator, позволяющая нарушителю оказать воздействие на целостность данных

CVSS3: 8.5
redos
20 дней назад

Множественные уязвимости nvidia-container-toolkit

EPSS

Процентиль: 30%
0.00112
Низкий

4.1 Medium

CVSS3

Дефекты

CWE-61