222 matches found
CVE-2024-0132
CVE-2024-0132 CVE-2024-0132 PoC 让我们从确定基础镜像开始。系统中库的排列方式取决于所选的基础镜像。例如，对于 alpine，库目录将是 /usr/lib64/；对于 ubuntu，则是 /usr/lib/x8664-linux-gnu。我们将使用 ubuntu 作为基础镜像。 root@kitploit: FROM ubuntu NVIDIA 容器工具包会检查容器内 /usr/local/cuda/compat/ 中的库，然后将它们挂载到主库目录；对于这个镜像（ubuntu），主库目录就是 /usr/lib/x8664-linux-gnu。...
poc-cve-2024-0132
poc-cve-2024-0132 复现环境： 操作系统：Ubuntu 22.04 搭配 NVIDIA 驱动 Docker：v27.1.0 nvidia-container-toolkit：v1.16.1 复现步骤： 运行 POC 容器镜像 目标： 在容器内访问主机文件 通过容器内的 docker.sock 调用 Docker 守护进程 API 复现 使用预构建的 POC 镜像 ssst0n3/poc-cve-2024-0132，或自行从源码构建。 root@kitploit: root@wanglei-gpu3: git clone...
CVE-2025-23266
CVE-2025-23266 CVE-2025-23266 – 全武器化的NVIDIA容器工具包漏洞利用 参考 https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...
CVE-2025-23266
CVE-2025-23266 作者： Mark Mallia 目标平台： Ubuntu 22.04，FastAPI v2.4.3 → 于2025‑10‑02修补至v2.5.1 1 – 简介：此攻击涉及什么 FastAPI 的 parserequest 例程会将 HTTP 请求头部复制到一个位于调用者堆栈上的小型缓冲区中。 如果攻击者发送了过长的头部，该缓冲区会发生溢出，并重写紧随其后的 返回地址 。随后攻击者跳回同一次请求，执行任意代码，从而完全控制宿主机。 其效果类似于为 Triton Inference Server 发现的 RCE 链——唯一的区别在于缓冲区的确切长度（528...
AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-4097 vulnerabilities
Vulnerabilities for packages: buildah, node-feature-discovery, nvidia-container-toolkit, podman, falco-no-driver, k3s, grafana-alloy, sriov-network-device-plugin, kubernetes...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: buildah, nvidia-container-toolkit, node-feature-discovery, podman, k8s-device-plugin, cadvisor, sriov-network-device-plugin...
GO-2025-4096 vulnerabilities
Vulnerabilities for packages: buildah, node-feature-discovery, nvidia-container-toolkit, podman, falco-no-driver, k3s, grafana-alloy, sriov-network-device-plugin, kubernetes...
CLEANSTART-2026-ZM37811 Security fixes in nvidia-container-toolkit 1.19.0-r1
Package nvidia-container-toolkit version 1.19.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...
CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0
Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...
CLEANSTART-2026-UV94685 Security fixes in nvidia-container-toolkit 1.18.2-r1
Package nvidia-container-toolkit version 1.18.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...
CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3
Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...
NVIDIA Container Toolkit < 1.19.1 TOCTOU Race Condition (June 2026)
The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.19.1. It is, therefore, affected by a vulnerability as referenced in the June 2026 advisory. - NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use...