The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17.1. It is, therefore, affected by multiple vulnerabilities as referenced in the January 2025 advisory.

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to     code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
    (CVE-2024-0135)

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to untrusted code obtaining read and write access to host devices. This vulnerability is     present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of     this vulnerability may lead to code execution, denial of service, escalation of privileges, information     disclosure, and data tampering. (CVE-2024-0136)

  - NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container     image could lead to untrusted code running in the host’s network namespace. This vulnerability is present     only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this     vulnerability may lead to denial of service and escalation of privileges. (CVE-2024-0137)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

NVIDIA Container Toolkit 1.17.1 Multiple Vulnerabilities (2025_01)

high Nessus Plugin ID 214271

Version 1.3