254 matches found
CVE-2024-0132
CVE-2024-0132 CVE-2024-0132 PoC Empecemos decidiendo una imagen base. La disposición de las bibliotecas en el sistema depende de cuál sea. Por ejemplo, para alpine será /usr/lib64/, para ubuntu será /usr/lib/x8664-linux-gnu. Usaremos ubuntu como imagen base. FROM ubuntu El nvidia containter toolk...
poc-cve-2024-0132
poc-cve-2024-0132 Entorno de reproducción: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Paso de reproducción: ejecutar la imagen del contenedor poc Objetivo: Acceder a archivos del host en el contenedor Llamar a las APIs del daemon de Docker a través del...
CVE-2025-23266
CVE-2025-23266 CVE-2025-23266 – Fully Weaponized NVIDIA Container Toolkit Exploit References https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...
CVE-2025-23266
CVE-2025-23266 Autor: Mark Mallia Plataforma objetivo: Ubuntu 22.04, FastAPI v2.4.3 → parcheado a v2.5.1 el 2025‑10‑02 1 – En resumen: ¿qué implica este ataque La rutina parserequest de FastAPI copia los encabezados de las solicitudes HTTP en un pequeño búfer que reside en la pila del llamante. S...
Rocky Linux 10.0 [CIQ] Security Update: toolbox / toolbox-debuginfo / toolbox-debugsource / toolbox-tests (crlsa-2025_13674)
The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202513674 advisory. nvidia-container-toolkit: Privilege Escalation via Hook Initialization in NVIDIA Container Toolkit CVE-2025-23266 Tenable has extracted the preceding descriptio...
CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0
CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GY71678 Security fix for CVE-2026-41579 applied in: cadvisor 0.55.1-r1, cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, nvidia-container-toolkit 1.19.0-r2
CVE-2026-41579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JK26072 Security fix for CVE-2025-50688 applied in: nvidia-container-toolkit 1.19.0-r3
Security vulnerability affects the nvidia-container-toolkit package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100847
Security vulnerability affects the nvidia-container-toolkit package. This issue is resolved in later releases. See references for vulnerability details...
AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-4096 vulnerabilities
Vulnerabilities for packages: podman, grafana-alloy, falco-no-driver, kubernetes, buildah, nvidia-container-toolkit, k3s, sriov-network-device-plugin, node-feature-discovery...