Description
NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply Kubernetes host-namespace and container-security settings. A successful exploit may lead to code execution, privilege escalation, information disclosure, data tampering, and denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | AIStore framework | 0 to 4.9 | — |