286 matches found
CVE-2024-0132
CVE-2024-0132 CVE-2024-0132 PoC Empecemos decidiendo una imagen base. La disposición de las bibliotecas en el sistema depende de cuál sea. Por ejemplo, para alpine será /usr/lib64/, para ubuntu será /usr/lib/x8664-linux-gnu. Usaremos ubuntu como imagen base. FROM ubuntu El nvidia containter toolk...
poc-cve-2024-0132
poc-cve-2024-0132 Entorno de reproducción: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 Paso de reproducción: ejecutar la imagen del contenedor poc Objetivo: Acceder a archivos del host en el contenedor Llamar a las APIs del daemon de Docker a través del...
CVE-2025-23266
CVE-2025-23266 CVE-2025-23266 – Exploit totalmente armado para NVIDIA Container Toolkit Referencias https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...
CVE-2025-23266
CVE-2025-23266 Author: Mark Mallia Target platform: Ubuntu 22.04, FastAPI v2.4.3 → patched to v2.5.1 on 2025‑10‑02 1 – In a nutshell: what does this attack involve FastAPI’s parserequest routine copies HTTP request headers into a small buffer that lives on the caller’s stack. If an attacker sends...
CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0
CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GY71678 Security fix for CVE-2026-41579 applied in: cadvisor 0.55.1-r1, cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, nvidia-container-toolkit 1.19.0-r2
CVE-2026-41579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JK26072 Security fix for CVE-2025-50688 applied in: nvidia-container-toolkit 1.19.0-r3
Security vulnerability affects the nvidia-container-toolkit package. This issue is resolved in later releases. See references for vulnerability details...
AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-4097 vulnerabilities
Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, buildah, nvidia-container-toolkit, grafana-alloy, podman, node-feature-discovery, falco-no-driver, k3s...
GO-2025-4096 vulnerabilities
Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, buildah, nvidia-container-toolkit, grafana-alloy, podman, node-feature-discovery, falco-no-driver, k3s...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: cadvisor, sriov-network-device-plugin, buildah, nvidia-container-toolkit, k8s-device-plugin, podman, node-feature-discovery, falco-no-driver...