NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-76012a9a99 advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4






Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a15b07073f advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4









Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17.1. It is, therefore, affected by multiple vulnerabilities as referenced in the January 2025 advisory.

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to     code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2024-0135)

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is     present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of     this vulnerability may lead to code execution, denial of service, escalation of privileges, information     disclosure, and data tampering. (CVE-2024-0136)

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to untrusted code running in the host’s network namespace. This vulnerability is present     only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this     vulnerability may lead to denial of service and escalation of privileges. (CVE-2024-0137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
215161	Fedora 40 : golang-github-nvidia-container-toolkit (2025-76012a9a99)	Nessus	Fedora Local Security Checks	high
215149	Fedora 41 : golang-github-nvidia-container-toolkit (2025-a15b07073f)	Nessus	Fedora Local Security Checks	high
214271	NVIDIA Container Toolkit 1.17.1 Multiple Vulnerabilities (2025_01)	Nessus	Misc.	high

Detections

Analytics

CVE-2024-0135

high

Tenable Plugins

high

high

high