What is the CVSS score of CVE-2024-0137?

CVE-2024-0137 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Nvidia Container Toolkit are affected by CVE-2024-0137?

Organizations using NVIDIA Container Toolkit should be aware of moderate risk from CVE-2024-0137 rated CVSS 5.5. Exploitation could compromise the security of affected deployments.. A patch is available.

How to fix or mitigate CVE-2024-0137?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Nvidia Container Toolkit CVE-2024-0137

MEDIUM

Improper Isolation or Compartmentalization (CWE-653)

2025-01-28 psirt@nvidia.com

Nvidia Denial Of Service Nvidia Container Toolkit Nvidia Gpu Operator Red Hat Suse

5.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

SUSE

MEDIUM

qualitative

Red Hat

5.5 MEDIUM

qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch released

Apr 02, 2026 - 08:30 nvd

Patch available

Analysis Generated

Mar 28, 2026 - 18:06 vuln.today

CVE Published

Jan 28, 2025 - 03:15 nvd

MEDIUM 5.5

DescriptionCVE.org

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges.

AnalysisAI

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-653. NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to untrusted code running in the host’s network namespace. This vulnerability is present only when the NVIDIA Container Toolkit is configured in a nondefault way. A successful exploit of this vulnerability may lead to denial of service and escalation of privileges. Affected products include: Nvidia Nvidia Container Toolkit, Nvidia Nvidia Gpu Operator.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Nvidia Container Toolkit

View all

CVE-2025-23359 HIGH This Week POC

8.3 Feb 12

NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default co

CVE-2024-0132 HIGH This Week POC

8.3 Sep 26

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with de

CVE-2024-0134 MEDIUM This Month

4.1 Nov 05

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted contai

CVE-2024-0133 LOW Monitor

3.4 Sep 26

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a speciall

CVE-2024-0136 HIGH This Month

7.6 Jan 28

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le

CVE-2024-0135 HIGH This Month

7.6 Jan 28

NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could le

Same weakness CWE-653 – Improper Isolation or Compartmentalization

View all

CVE-2025-1974 CRITICAL POC

9.8

CVE-2025-21590 MEDIUM

6.7

CVE-2024-33768 CRITICAL POC

9.8

CVE-2025-34201 HIGH POC

8.5

CVE-2024-23683 HIGH POC

8.2

CVE-2023-1305 HIGH POC

8.1

CVE-2026-4692 CRITICAL

10.0

CVE-2024-35425 MEDIUM POC

5.5

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

SUSE

Severity: Medium

Product	Status
SUSE Enterprise Storage 7.1	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Fixed

CVE-2024-0137 vulnerability details – vuln.today

Back

Nvidia Container Toolkit CVE-2024-0137

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

More in Nvidia Container Toolkit

Same weakness CWE-653 – Improper Isolation or Compartmentalization

Same technique Denial Of Service

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code