Known vulnerabilities in nvidia-container-toolkit

Known vulnerabilities in nvidia-container-toolkit

Vendor: SUSE

Software: nvidia-container-toolkit

Software CPE: cpe:2.3:o:suse:nvidia-container-toolkit:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 9

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU113764 - Improper Link Resolution Before File Access ('Link Following') CVE-2025-23267	CWE-59	Medium	No	No	1.18.0-150200.5.17.1	07.08.2025	SB2025080772 SB2025081001 SB2025081002 and 1 more
#VU113763 - Untrusted Search Path CVE-2025-23266	CWE-426	Low	Available	No	1.18.0-150200.5.17.1	07.08.2025	SB2025080772 SB2025080773 SB2025081001 and 4 more
#VU103896 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2025-23359	CWE-367	High	No	No	1.18.0-150200.5.17.1	12.02.2025	SB2025021232 SB2025042336 SB2025042337 and 2 more
#VU102819 - Improper isolation or compartmentalization CVE-2024-0137	CWE-653	Medium	No	No	1.18.0-150200.5.17.1	15.01.2025	SB2025011576 SB2025012963 SB2025112468
#VU102818 - Improper isolation or compartmentalization CVE-2024-0136	CWE-653	Low	No	No	1.18.0-150200.5.17.1	15.01.2025	SB2025011576 SB2025012963 SB2025112468
#VU102817 - Improper isolation or compartmentalization CVE-2024-0135	CWE-653	Low	No	No	1.18.0-150200.5.17.1	15.01.2025	SB2025011576 SB2025012963 SB2025112468
#VU99744 - UNIX Symbolic Link (Symlink) Following CVE-2024-0134	CWE-61	Low	No	No	1.18.0-150200.5.17.1	05.11.2024	SB2024110520 SB2025012501 SB2025012502 and 2 more
#VU97847 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2024-0133	CWE-367	Low	No	No	1.18.0-150200.5.17.1	01.10.2024	SB2024100101 SB2024110501 SB2024110502 and 2 more
#VU97846 - Time-of-check Time-of-use (TOCTOU) Race Condition CVE-2024-0132	CWE-367	Medium	Available	No	1.18.0-150200.5.17.1	01.10.2024	SB2024100101 SB2024110501 SB2024110502 and 2 more