Security Bulletin: Security vulnerability CVE-2024-39689 in Certifi python-certifi that is used by FileNet Content Manager and CP4BA - Filenet Content Manager Component

Summary Security vulnerability CVE-2024-39689 in Certifi python-certifi that is used by FileNet Content Manager and CP4BA - Filenet Content Manager Component in container Operator Vulnerability Details CVEID:CVE-2024-39689 DESCRIPTION: Certifi python-certifi could provide weaker than expected...

GHSA-2X2G-32R7-P4X8 vulnerabilities

Vulnerabilities for packages: apache-nifi, thingsboard, druid, strimzi-kafka-operator, logstash...

GHSA-2X2G-32R7-P4X8 vulnerabilities

Vulnerabilities for packages: apache-nifi, logstash, thingsboard, strimzi-kafka-operator, druid...

CVE-2024-31141 vulnerabilities

Vulnerabilities for packages: apache-nifi, thingsboard, druid, strimzi-kafka-operator, logstash...

CVE-2024-31141 vulnerabilities

Vulnerabilities for packages: apache-nifi, logstash, thingsboard, strimzi-kafka-operator, druid...

NVIDIA Container Toolkit Data Compromise

The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to errors in processing symbolic links. Exploiting this vulnerability can allow an attacker to compromise data integrity...

CVE-2024-11079 vulnerabilities

Vulnerabilities for packages: ansible-operator, py3-ansible-core...

Bitcoin Fog Operator Gets 12.5 Years for Longest-Running Bitcoin Laundering

Bitcoin Fog operator sentenced to 12.5 years for laundering $400M in crypto. The dark web's longest-running mixer processed…...

GHSA-32P4-GM2C-WMCH vulnerabilities

Vulnerabilities for packages: ansible-operator...

CVE-2024-9902 vulnerabilities

Vulnerabilities for packages: ansible-operator...

AZL-52393 CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

CVE-2024-0134

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

CVE-2024-0134

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

CVE-2024-0134

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

CVE-2024-0134

CVE-2024-0134 affects the NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux. A specially crafted container image can create unauthorized files on the host, with naming and location control not possible by the attacker, potentially enabling data tampering. Public advisories indicate remed...

CVE-2024-0134

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

CVE-2024-0134: UNIX Symbolic Link (Symlink) Following

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...

Security Bulletin: NVIDIA Container Toolkit - November 2024

NVIDIA has released a software update for NVIDIA® Container Toolkit and NVIDIA GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product...

NVIDIA Container Toolkit security vulnerabilities

NVIDIA Container Toolkit and NVIDIA GPU Operator are both products of NVIDIA Corporation.NVIDIA Container Toolkit is a container toolkit. NVIDIA Container Toolkit is a container toolkit that allows users to build and run GPU-accelerated containers.NVIDIA GPU Operator is a GPU management and...

PT-2024-7904

Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit versions prior to the fixed version NVIDIA GPU Operator versions prior to the fixed version Description The issue is related to errors in processing symbolic links, which can be exploited by a remote attacker to impact...