CVE-2025-23266

CVE-2025-23266 Автор: Mark Mallia Целевая платформа: Ubuntu 22.04, FastAPI v2.4.3 → исправлено до v2.5.1 2025‑10‑02 1 – В двух словах: в чём суть атаки Процедура parserequest в FastAPI копирует HTTP-заголовки запроса в небольшой буфер, расположенный в стеке вызывающей стороны. Если злоумышленник...

CVE-2024-0132

CVE-2024-0132 CVE-2024-0132 PoC 기본 이미지를 결정하는 것부터 시작하겠습니다. 시스템 내 라이브러리 배열은 이미지 종류에 따라 달라집니다. 예를 들어 alpine의 경우 /usr/lib64/, ubuntu의 경우 /usr/lib/x8664-linux-gnu입니다. 여기서는 ubuntu를 기본 이미지로 사용합니다. root@kitploit: FROM ubuntu nvidia 컨테이너 툴킷은 컨테이너 내부의 /usr/local/cuda/compat/에 있는 라이브러리를 확인한 다음 이를 메인 라이브러리...

poc-cve-2024-0132

poc-cve-2024-0132 재현 환경: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 재현 단계: poc 컨테이너 이미지 실행 목표: 컨테이너 내에서 호스트 파일 접근 컨테이너 내 docker.sock을 통해 Docker 데몬 API 호출 재현 사전 빌드된 poc 이미지 ssst0n3/poc-cve-2024-0132를 사용하거나, 소스에서 직접 빌드하세요. root@kitploit: root@wanglei-gpu3:...

CVE-2025-23266

CVE-2025-23266 CVE-2025-23266 – 완전히 무기화된 NVIDIA 컨테이너 툴킷 익스플로잇 참조 https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...

AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4

Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...

AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4

Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3237 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-3992 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2024-3239 vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GO-2025-4097 vulnerabilities

Vulnerabilities for packages: buildah, k3s, kubernetes, sriov-network-device-plugin, podman, nvidia-container-toolkit, grafana-alloy, falco-no-driver, node-feature-discovery...

GO-2025-4096 vulnerabilities

Vulnerabilities for packages: buildah, k3s, kubernetes, sriov-network-device-plugin, podman, nvidia-container-toolkit, grafana-alloy, falco-no-driver, node-feature-discovery...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: buildah, k8s-device-plugin, sriov-network-device-plugin, cadvisor, podman, nvidia-container-toolkit, node-feature-discovery...

CLEANSTART-2026-ZM37811 Security fixes in nvidia-container-toolkit 1.19.0-r1

Package nvidia-container-toolkit version 1.19.0-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-II73843 Security fixes in nvidia-container-toolkit 1.18.2-r0

Package nvidia-container-toolkit version 1.18.2-r0 fixes 1 vulnerabilities: CVE-2026-39824...

CLEANSTART-2026-UV94685 Security fixes in nvidia-container-toolkit 1.18.2-r1

Package nvidia-container-toolkit version 1.18.2-r1 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-FD66062 Security fixes in nvidia-container-toolkit 1.19.0-r3

Package nvidia-container-toolkit version 1.19.0-r3 fixes 3 vulnerabilities: CVE-2025-50688, CVE-2026-42505, CVE-2026-39822...

NVIDIA Container Toolkit < 1.19.1 TOCTOU Race Condition (June 2026)

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.19.1. It is, therefore, affected by a vulnerability as referenced in the June 2026 advisory. - NVIDIA Container Toolkit for Linux contains a vulnerability where an attacker could cause a time-of-check time-of-use...