[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuuxAD2LyzMAA6d7KDiDuw6h6wXXoG5wEx6BX_lnERQA":3,"g5a-risk:CVE-2024-0134":118},{"success":4,"data":5,"meta":115},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":37,"affectedProducts":38,"affectedProductsCount":52,"references":53,"referencesCount":59,"weaknesses":60,"weaknessesCount":59,"isActivelyExploited":69,"cisaInfo":27,"otxData":27,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":113,"notableEvents":114},"CVE-2024-0134","What is CVE-2024-0134?","NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.","NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of...","2024-11-05T19:15:05.203","2024-11-08T15:53:40.2",4.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:N\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","REQUIRED","CHANGED","NONE","MEDIUM",null,2.3,1.4,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"psirt@nvidia.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":22,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00391,[36,36,36,36,34,34,34],0.00368,"Medium",[39,44,47],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"nvidia","nvidia_container_toolkit","*","cpe:2.3:a:nvidia:nvidia_container_toolkit:*:*:*:*:*:*:*:*",{"vendor":40,"product":45,"version":42,"criteria":46,"vulnerable":4},"nvidia_gpu_operator","cpe:2.3:a:nvidia:nvidia_gpu_operator:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"linux","linux_kernel","-","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",3,[54],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fnvidia.custhelp.com\u002Fapp\u002Fanswers\u002Fdetail\u002Fa_id\u002F5585","Custhelp",[58],"Vendor Advisory",1,[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-61","UNIX Symbolic Link (Symlink) Following","The product, when opening a file or directory, does not sufficiently account for when the file is a symbolic link that resolves to a target outside of the intended control sphere. This could allow an attacker to cause the product to operate on unauthorized files.","A product that allows UNIX symbolic links (symlink) as part of paths whether in internal code or through user input can allow an attacker to spoof the symbolic link and traverse the file system to unintended locations or access arbitrary files. The symbolic link can permit an attacker to read\u002Fwrite\u002Fcorrupt a file that they originally did not have permissions to access.","Incomplete","Compound","Composite",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2024-0134? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-0134, a medium severity cyber security vulnerability from 2024. NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux...","CVE-2024-0134, CVE-2024-0134 vulnerability, CVE-2024-0134 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, nvidia security, linux security, nvidia_container_toolkit vulnerability, nvidia_gpu_operator vulnerability, linux_kernel vulnerability","\u002Fwhat-is\u002Fcve-2024-0134",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-0134","Cybersecurity","CVE-2024-0134, CVE-2024-0134 vulnerability, CVE-2024-0134 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":98,"Negate":27,"Nodes":99},"AND",[100,109],{"Operator":101,"Negate":27,"CPEMatch":102},"OR",[103,106],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":104,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":105,"VersionEndIncluding":27},"004681E6-7D96-4A27-A5B1-F9E2D7EB5617","1.17",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":107,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":108,"VersionEndIncluding":27},"1338BFAB-73D4-4255-A33D-1016965C00F9","24.9.0",{"Operator":101,"Negate":27,"CPEMatch":110},[111],{"Vulnerable":27,"Criteria":51,"MatchCriteriaID":112,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"703AF700-7A70-47E2-BC3A-7FD03B3CA9C1",[],[],{"lastModified":11,"cacheTime":116,"version":117},1792248921105,"2.0",{"score":119,"band":120,"action":121,"scoredAt":122},16,"Info","Track","2026-10-16T07:04:24.545338+00:00"]