poc-cve-2024-0132

poc-cve-2024-0132 Среда воспроизведения: ОС: ubuntu 22.04 с драйвером nvidia Docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Шаги воспроизведения: Запустите образ poc-контейнера Цель: Получить доступ к файлам хоста внутри контейнера Вызывать API демона Docker через docker.sock внутри контейнера...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – Полностью вооруженный эксплойт для NVIDIA Container Toolkit Ссылки https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

CVE-2025-23266

CVE-2025-23266 Автор: Mark Mallia Целевая платформа: Ubuntu 22.04, FastAPI v2.4.3 → исправлено до v2.5.1 2025‑10‑02 1 – В двух словах: в чём суть атаки Процедура parserequest в FastAPI копирует HTTP-заголовки запроса в небольшой буфер, расположенный в стеке вызывающей стороны. Если злоумышленник...

CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC Начнём с выбора базового образа. Расположение библиотек в системе зависит от того, какой это будет образ. Например, для alpine это будет /usr/lib64/, для ubuntu — /usr/lib/x8664-linux-gnu. В качестве базового образа мы будем использовать ubuntu. root@kitploit: FROM...

AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: buildah, sriov-network-device-plugin, grafana-alloy, falco-no-driver, nvidia-container-toolkit, node-feature-discovery, k3s, podman, kubernetes...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: buildah, sriov-network-device-plugin, grafana-alloy, falco-no-driver, nvidia-container-toolkit, node-feature-discovery, k3s, podman, kubernetes...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: buildah, k8s-device-plugin, sriov-network-device-plugin, nvidia-container-toolkit, node-feature-discovery, podman, cadvisor...

CLEANSTART-2026-ZM37811 Security fixes in nvidia-container-toolkit 1.19.0-r1

Package nvidia-container-toolkit version 1.19.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-UV94685 Security fixes in nvidia-container-toolkit 1.18.2-r1

Package nvidia-container-toolkit version 1.18.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3

Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...

NVIDIA Container Toolkit < 1.19.1 TOCTOU Race Condition (June 2026)

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.19.1. It is, therefore, affected by a vulnerability as referenced in the June 2026 advisory. - NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use...