62136 matches found
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: logstash, druid, strimzi-kafka-operator, apache-nifi, thingsboard...
CVE-2024-31141 vulnerabilities
Vulnerabilities for packages: logstash, druid, apache-nifi, strimzi-kafka-operator, thingsboard...
NVIDIA Container Toolkit Data Compromise
The vulnerability of the software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is related to errors in processing symbolic links. Exploiting this vulnerability can allow an attacker to compromise data integrity...
CVE-2024-11079 vulnerabilities
Vulnerabilities for packages: ansible-operator, py3-ansible-core...
Bitcoin Fog Operator Gets 12.5 Years for Longest-Running Bitcoin Laundering
Bitcoin Fog operator sentenced to 12.5 years for laundering $400M in crypto. The dark web's longest-running mixer processed…...
GHSA-32P4-GM2C-WMCH vulnerabilities
Vulnerabilities for packages: ansible-operator...
CVE-2024-9902 vulnerabilities
Vulnerabilities for packages: ansible-operator...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
AZL-52393 CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
CVE-2024-0134 affects the NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux. A specially crafted container image can create unauthorized files on the host, with naming and location control not possible by the attacker, potentially enabling data tampering. Public advisories indicate remed...
Security Bulletin: NVIDIA Container Toolkit - November 2024
NVIDIA has released a software update for NVIDIA® Container Toolkit and NVIDIA GPU Operator. To protect your system, install the software update as described in the installation section of the NVIDIA Container Toolkit documentation and the NVIDIA GPU Operator documentation. Go to NVIDIA Product...
CVE-2024-0134: UNIX Symbolic Link (Symlink) Following
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
NVIDIA Container Toolkit security vulnerabilities
NVIDIA Container Toolkit and NVIDIA GPU Operator are both products of NVIDIA Corporation.NVIDIA Container Toolkit is a container toolkit. NVIDIA Container Toolkit is a container toolkit that allows users to build and run GPU-accelerated containers.NVIDIA GPU Operator is a GPU management and...
PT-2024-7904
Name of the Vulnerable Software and Affected Versions NVIDIA Container Toolkit versions prior to the fixed version NVIDIA GPU Operator versions prior to the fixed version Description The issue is related to errors in processing symbolic links, which can be exploited by a remote attacker to impact...
GHSA-29WX-VH33-7X7R vulnerabilities
Vulnerabilities for packages: tkn-fips, argo-rollouts-fips, cosign, minio, kots, argo-workflows-fips, opentelemetry-collector-contrib-fips, doppler-kubernetes-operator, falcoctl-fips, zot, chartmuseum, docker, grafana-alloy, kine, kaniko, chainctl, ko, cosign-fips, flyte, scorecard,...
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.6 is vulnerable to multiple Operator package issues
Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.6 is vulnerable to multiple Operator package issues. We have performed updates to the Operators used by our Speech Services. The following vulnerabilities have been addressed in this update. Please read the details for...