NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

The version of nvidia-container-toolkit installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0134 advisory.

  - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially     crafted container image can lead to the creation of unauthorized files on the host. The name and location     of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to     data tampering. (CVE-2024-0134)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-76012a9a99 advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4






Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-a15b07073f advisory.

    * Update to 1.17.3
    * Fixes CVE-2024-0134 or GHSA-7jm9-xpwx-v999
    * Fixes CVE-2024-0135 or GHSA-9v84-cc9j-pxr6, CVE-2024-0136 or GHSA-vcfp-63cx-4h59, and CVE-2024-0137 or     GHSA-frhw-w3wm-6cw4









Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of nvidia-container-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-0134 advisory.

  - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially     crafted container image can lead to the creation of unauthorized files on the host. The name and location     of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to     data tampering. (CVE-2024-0134)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17. It is, therefore, affected by a data tampering vulnerability as referenced in the November 2024 Security Bulletin.

  - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted     container image can lead to the creation of unauthorized files on the host. The name and location of the files     cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering. 

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
215932	Azure Linux 3.0 Security Update: nvidia-container-toolkit (CVE-2024-0134)	Nessus	Azure Linux Local Security Checks	medium
215161	Fedora 40 : golang-github-nvidia-container-toolkit (2025-76012a9a99)	Nessus	Fedora Local Security Checks	medium
215149	Fedora 41 : golang-github-nvidia-container-toolkit (2025-a15b07073f)	Nessus	Fedora Local Security Checks	medium
212863	CBL Mariner 2.0 Security Update: nvidia-container-toolkit (CVE-2024-0134)	Nessus	MarinerOS Local Security Checks	medium
210406	NVIDIA Container Toolkit < 1.17 Data Tampering	Nessus	Misc.	medium

Detections

Analytics

CVE-2024-0134

medium

Tenable Plugins

medium

medium

medium

medium

medium