[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f95K9n6E1xC18NwfWLU4ELZqrMAaGeTiGnzWZLPZEIg0":3,"g5a-risk:CVE-2024-0132":138},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":29,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":59,"references":60,"referencesCount":66,"weaknesses":67,"weaknessesCount":66,"isActivelyExploited":55,"cisaInfo":29,"otxData":29,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":126,"notableEvents":127},"CVE-2024-0132","What is CVE-2024-0132?","NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.","NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration where a specifica...","2024-09-26T06:15:02.397","2026-06-17T06:52:50.66",8.3,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":38,"CVSSMetricV2":39,"CVSSMetricV40":40},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"psirt@nvidia.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","LOW","REQUIRED","CHANGED","HIGH",9,"CRITICAL",null,2.3,6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":26,"PrivilegesRequired":36,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"NONE",1.6,[],[],[],0.40842,[41,41,41,41,41,41,41],"High",[45,50,56],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"nvidia","nvidia_container_toolkit","*","cpe:2.3:a:nvidia:nvidia_container_toolkit:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":55},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",false,{"vendor":46,"product":57,"version":48,"criteria":58,"vulnerable":4},"nvidia_gpu_operator","cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:*",3,[61],{"url":62,"source":63,"tags":64},"https:\u002F\u002Fnvidia.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F5582","Custhelp",[65],"Vendor Advisory",1,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-367","Time-of-check Time-of-use (TOCTOU) Race Condition","The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check. This can cause the product to perform invalid actions when the resource is in an unexpected state.","This weakness can be security-relevant when an attacker can influence the state of the resource between check and use. This can happen with shared resources such as files, memory, or even variables in multithreaded programs.","Incomplete","Base","Simple",[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2024-0132? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-0132, a high severity cyber security vulnerability from 2024. High exploit probability (40.8%). NVIDIA Container Toolkit 1...","CVE-2024-0132, CVE-2024-0132 vulnerability, CVE-2024-0132 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, nvidia security, linux security, nvidia_container_toolkit vulnerability, linux_kernel vulnerability, nvidia_gpu_operator vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2024-0132",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-0132","Cybersecurity","CVE-2024-0132, CVE-2024-0132 vulnerability, CVE-2024-0132 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103,116],{"Operator":104,"Negate":29,"Nodes":105},"AND",[106,112],{"Operator":107,"Negate":55,"CPEMatch":108},"OR",[109],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":110,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":111,"VersionEndIncluding":29},"55455A6E-4257-4750-9A18-8D8A5EA029B7","1.16.2",{"Operator":107,"Negate":55,"CPEMatch":113},[114],{"Vulnerable":55,"Criteria":54,"MatchCriteriaID":115,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",{"Operator":104,"Negate":29,"Nodes":117},[118,123],{"Operator":107,"Negate":55,"CPEMatch":119},[120],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":121,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":122,"VersionEndIncluding":29},"28B17317-5E43-4842-BB41-6E459FAD3D40","24.6.2",{"Operator":107,"Negate":55,"CPEMatch":124},[125],{"Vulnerable":55,"Criteria":54,"MatchCriteriaID":115,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},[],[128],{"id":129,"eventType":130,"eventTime":131,"details":132,"label":133,"color":134},"914a52d9-5d0f-482b-9e73-cc439ba42e02","HIGH_EPSS_DELTA","2026-06-16T04:04:53.9276+00:00","Daily EPSS score increased by 0.325 on 2024-09-28","EPSS Score Increased","red",{"lastModified":11,"cacheTime":136,"version":137},1792248370293,"2.0",{"score":139,"band":140,"action":141,"scoredAt":142},54,"Medium","Plan remediation","2026-10-16T07:03:55.721924+00:00"]