Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Vulnerability Title
NVIDIA Container Toolkit 安全漏洞
Vulnerability Description
NVIDIA Container Toolkit是美国英伟达（NVIDIA）公司的一个容器工具包。允许用户构建和运行 GPU 加速的容器。 NVIDIA Container Toolkit 24.9.2之前版本存在安全漏洞，该漏洞源于在默认配置下使用时包含检查时间使用时间(TOCTOU)漏洞，其中精心设计的容器映像可以访问主机文件系统，成功利用此漏洞可能会导致代码执行、拒绝服务、特权升级、信息泄露和数据篡改。
CVSS Information
N/A
Vulnerability Type
N/A