CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC まずベースイメージを決めるところから始めましょう。システム内のライブラリの配置は、そのベースイメージに依存します。例えば、alpine では /usr/lib64/ になり、ubuntu では /usr/lib/x8664-linux-gnu になります。ここではベースイメージとして ubuntu を使用します。 root@kitploit: FROM ubuntu NVIDIA コンテナツールキットは、コンテナ内の /usr/local/cuda/compat/...

poc-cve-2024-0132

poc-cve-2024-0132 재현 환경: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 재현 단계: poc 컨테이너 이미지 실행 목표: 컨테이너 내에서 호스트 파일 접근 컨테이너 내 docker.sock을 통해 Docker 데몬 API 호출 재현 사전 빌드된 poc 이미지 ssst0n3/poc-cve-2024-0132를 사용하거나, 소스에서 직접 빌드하세요. root@kitploit: root@wanglei-gpu3:...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – 完全に武器化されたNVIDIA Container Toolkit Exploit 参考文献 https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

CVE-2025-23266

CVE-2025-23266 저자: Mark Mallia 대상 플랫폼: Ubuntu 22.04, FastAPI v2.4.3 → v2.5.1로 패치 2025‑10‑02 1 – 간단히: 이 공격이 수반하는 것은 FastAPI의 parserequest 루틴은 HTTP 요청 헤더를 호출자의 스택에 있는 작은 버퍼로 복사합니다. 공격자가 너무 긴 헤더를 보내면 해당 버퍼가 오버플로되어 그 뒤에 있는 반환 주소 를 덮어씁니다. 그러면 공격자는 동일한 요청 내부로 다시 점프하여 임의 코드를 실행하고 호스트 머신의 전체 제어권을 획득합니다. ...

AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, nvidia-container-toolkit, buildah, sriov-network-device-plugin, grafana-alloy, falco-no-driver, node-feature-discovery, podman...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: cadvisor, nvidia-container-toolkit, buildah, sriov-network-device-plugin, k8s-device-plugin, node-feature-discovery, podman...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: k3s, kubernetes, nvidia-container-toolkit, buildah, sriov-network-device-plugin, grafana-alloy, falco-no-driver, node-feature-discovery, podman...

CLEANSTART-2026-ZM37811 Security fixes in nvidia-container-toolkit 1.19.0-r1

Package nvidia-container-toolkit version 1.19.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-UV94685 Security fixes in nvidia-container-toolkit 1.18.2-r1

Package nvidia-container-toolkit version 1.18.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3

Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...

NVIDIA Container Toolkit < 1.19.1 TOCTOU Race Condition (June 2026)

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.19.1. It is, therefore, affected by a vulnerability as referenced in the June 2026 advisory. - NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use...