CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.7.0-4

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.7.0-4. A patched version of the package is available...

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.6.2-9

CVE-2025-22872 affecting package sriov-network-device-plugin for versions less than 3.6.2-9. A patched version of the package is available...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: argo-events, certificate-transparency, grafana-operator, kubevela, kubernetes, smarter-device-manager, gitea, temporal-ui-server, velero-plugin-for-microsoft-azure, multus-cni, ferretdb, petname, cosign, dex, render-template, scorecard, helm-operator, xcaddy, hcloud,...

Azure Linux 3.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

CBL Mariner 2.0 Security Update: sriov-network-device-plugin / vitess (CVE-2024-45339)

The version of sriov-network-device-plugin / vitess installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45339 advisory. - When logs are written to a widely-writable directory the default, an...

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.6.2-8

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.6.2-8. A patched version of the package is available...

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3

CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3. A patched version of the package is available...

AZL-56078 CVE-2024-45339 affecting package sriov-network-device-plugin for versions less than 3.7.0-3

When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place. When that privileged process runs, it will follow the planted symlink and overwrite that...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: aws-flb-kinesis-fips, nodetaint, bank-vaults, prometheus-bind-exporter, rclone-fips, mods, git-credential-oauth, kubernetes-dashboard-auth-fips, kubernetes-ingress-defaultbackend, gcp-compute-persistent-disk-csi-driver-fips, fulcio-fips, grafana-rollout-operator-fips...

CVE-2024-45338 affecting package sriov-network-device-plugin for versions less than 3.7.0-2

CVE-2024-45338 affecting package sriov-network-device-plugin for versions less than 3.7.0-2. A patched version of the package is available...

CVE-2024-45338 affecting package sriov-network-device-plugin for versions less than 3.6.2-7

CVE-2024-45338 affecting package sriov-network-device-plugin for versions less than 3.6.2-7. A patched version of the package is available...

CVE-2024-24786 affecting package sriov-network-device-plugin for versions less than 3.6.2-6

CVE-2024-24786 affecting package sriov-network-device-plugin for versions less than 3.6.2-6. A patched version of the package is available...

GHSA-F748-7HPG-88CH vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GHSA-MJJW-553X-87PQ vulnerabilities

Vulnerabilities for packages: nvidia-container-toolkit...

GHSA-MJJW-553X-87PQ vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

CVE-2024-0133 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

CVE-2024-0132 vulnerabilities

Vulnerabilities for packages: nvidia-gpu-operator-validator, nvidia-container-toolkit...

CVE-2022-32149 affecting package sriov-network-device-plugin for versions less than 3.7.0-1

CVE-2022-32149 affecting package sriov-network-device-plugin for versions less than 3.7.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.7.0-1

CVE-2022-41717 affecting package sriov-network-device-plugin for versions less than 3.7.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2022-29526 affecting package sriov-network-device-plugin for versions less than 3.7.0-1

CVE-2022-29526 affecting package sriov-network-device-plugin for versions less than 3.7.0-1. An upgraded version of the package is available that resolves this issue...