12 matches found
cve-2019-5736-poc
CVE-2019-5736 概念実証 これはホストのruncバイナリに文字列を追加します。自身のペイロードを持ち込んでください（stage2.cを参照）。 実行方法: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
CVE-2019-5736-POC
RunCによるDockerからの脱出 CVE-2019-5736の概念実証コード このPOCはYuvalAvra氏のPOCに大きく基づいています。 このPOCで使用されたコードに対して、私は一切のクレジットを主張しません。 この脆弱性の詳細と、どのように悪用されるかのデモンストレーションは、ワークシートにあります。 ワークシートの情報は、Twistlock Labsによるブログ記事に基づいています。 使用法 このPOCはホストシステム上のバイナリを変更する能力があるため、仮想マシン内で実行することを推奨します。...
EUVD-2024-15934
Malicious code in bioql PyPI...
CVE-2024-0135
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure,...
CVE-2024-0135
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure,...
CVE-2024-0135
CVE-2024-0135 affects the NVIDIA container-toolkit. The vulnerability is an improper isolation issue in the toolkit that could allow a specially crafted container image to modify a host binary, with potential for code execution, DoS, privilege escalation, information disclosure, and data tamperin...
NVIDIA Container Toolkit 安全漏洞
NVIDIA Container Toolkit is a container toolkit from NVIDIA, Inc. Allows users to build and run GPU-accelerated containers. A security vulnerability exists in NVIDIA Container Toolkit that stems from the inclusion of an incorrect isolation vulnerability, where a specially crafted container image...
PT-2025-1566 · Nvidia · Nvidia Container Toolkit
Name of the Vulnerable Software and Affected Versions: NVIDIA Container Toolkit versions are affected, but specific versions are not provided in the input data. Description: The issue is related to an improper isolation vulnerability where a specially crafted container image could lead to...
VulnCheck KEV: CVE-2019-5736
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host root access by leveraging the ability to execute a command as root within one of these types of containers: 1 a new container with an...
UBUNTU-CVE-2019-12499
Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...
Updated lxc packages fix security vulnerability
LXC allows attackers to overwrite the host LXC binary and consequently obtain host root access by leveraging the ability to execute a command as root within one of these types of containers: a new container with an attacker-controlled image, or an existing container, to which the attacker...
