Source: https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7246847026515034114
SecurityWeek: CVSS 9/10. Critical #NVIDIA #Container #Toolkit flaw could allow access to the underlying host: A #critical #vulnerability in the NVIDIA Container Toolkit could allow a container to escape and gain #full #access to the underlying #host. #Nvidia confirms #risk of #code #execution, #DOS denial of service, #escalation of #privileges, information #disclosure, and #data #tampering.
https://lnkd.in/eFYTueuc :
AIMLExchange.com: Get the Latest From Top GenAI’s & Search Engines:
https://lnkd.in/e_Cpsjcb :
NVIDIA: Security Bulletin: NVIDIA Container Toolkit – September 2024:
https://lnkd.in/eC7Kh2Fk :
Security Affairs: Critical #NVIDIA #Container #Toolkit flaw could allow access to the underlying host: A #critical #vulnerability in the NVIDIA Container Toolkit could allow a container to escape and gain #full #access to the underlying #host.
Critical vulnerability CVE-2024-0132 (CVSS score 9.0) in the NVIDIA Container Toolkit could allow an attacker to escape the container and gain full access to the underlying host. https://lnkd.in/ePWteFGY
AIMLExchange.com: Get the Latest From Top GenAI’s & Search Engines:
https://lnkd.in/ehzpB97x
The vulnerability is a Time-of-check Time-of-Use (TOCTOU) issue that impacts NVIDIA Container Toolkit 1.16.1 or earlier.
This issue impacts any #AI #applications using a #vulnerable #container #toolkit for #GPU support, whether in the #cloud or #onpremise.
“Wiz Research has uncovered a #critical #security #vulnerability, CVE-2024-0132, in the widely used NVIDIA Container Toolkit, which provides #containerized #AI applications with access to GPU resources. This impacts any AI application – in the cloud or on-premise – that is running the vulnerable container toolkit to enable #GPU support.” reads the advisory published by Wiz. “The vulnerability enables attackers who #control a #container #image executed by the vulnerable toolkit to escape from that container and gain full access to the underlying host system, posing a #serious #risk to #sensitive #data and #infrastructure.”
According to Wiz, 33% of #cloud #environments are impacted by this vulnerability based on analysis of 100K+ public cloud environments. This figure highlights the serious nature of the CVE-2024-0132 vulnerability.
https://lnkd.in/eDKN47vr
—
New York State: “Join Dr. Yogi Malhotra to get up to speed on Cloud Technology.”
USAF-AFRL Ventures: “Do Something Epic: Save the World™”:
We Create the Digital Future™. You Can Too! Let’s Show You How!
AIMLExchange™: AIMLExchange.com: We Create the Digital Future™
BRINT™: BRINT.com: From Future of Finance™ to Future of Defense™
C4I-Cyber™: C4I-Cyber.com: Because the Future of the World Depends Upon It™
—
AWS Quantum Valley Global Risk Management Network LLC: 30-Years Leading AI-Quantum Finance Practices
Silicon Valley’s Next Big Thing™: Know-Build-Monetize™ Networks: 30-Years Building Meaning-Aware AI
Silicon Valley-Wall Street-Pentagon Leader: 30 Years Building AI-Cyber-Crypto-Quantum Risk Networks
—
