12 matches found
cve-2019-5736-poc
CVE-2019-5736 Beweiskonzept Dies hängt eine Zeichenkette an die runc-Binärdatei des Hosts an. Bringen Sie Ihre eigene Payload mit siehe stage2.c. Ausführen: docker build -t cve . docker run cve strings /usr/bin/docker-runc | tail -n 2...
CVE-2019-5736-POC
Evadire Docker tramite RunC Un codice proof of concept per CVE-2019-5736 Questo POC è fortemente basato sul POC di YuvalAvra. Non rivendico alcun credito per il codice utilizzato in questo POC. Maggiori informazioni su questa vulnerabilità e una dimostrazione di come può essere sfruttata sono...
EUVD-2024-15934
Malicious code in bioql PyPI...
CVE-2024-0135
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure,...
CVE-2024-0135
NVIDIA Container Toolkit contains an improper isolation vulnerability where a specially crafted container image could lead to modification of a host binary. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure,...
CVE-2024-0135
CVE-2024-0135 affects the NVIDIA container-toolkit. The vulnerability is an improper isolation issue in the toolkit that could allow a specially crafted container image to modify a host binary, with potential for code execution, DoS, privilege escalation, information disclosure, and data tamperin...
NVIDIA Container Toolkit 安全漏洞
NVIDIA Container Toolkit is a container toolkit from NVIDIA, Inc. Allows users to build and run GPU-accelerated containers. A security vulnerability exists in NVIDIA Container Toolkit that stems from the inclusion of an incorrect isolation vulnerability, where a specially crafted container image...
PT-2025-1566 · Nvidia · Nvidia Container Toolkit
Name of the Vulnerable Software and Affected Versions: NVIDIA Container Toolkit versions are affected, but specific versions are not provided in the input data. Description: The issue is related to an improper isolation vulnerability where a specially crafted container image could lead to...
VulnCheck KEV: CVE-2019-5736
runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host root access by leveraging the ability to execute a command as root within one of these types of containers: 1 a new container with an...
UBUNTU-CVE-2019-12499
Firejail before 0.9.60 allows truncation resizing to length 0 of the firejail binary on the host by running exploit code inside a firejail sandbox and having the sandbox terminated. To succeed, certain conditions need to be fulfilled: The jail with the exploit code inside needs to be started as...
Updated lxc packages fix security vulnerability
LXC allows attackers to overwrite the host LXC binary and consequently obtain host root access by leveraging the ability to execute a command as root within one of these types of containers: a new container with an attacker-controlled image, or an existing container, to which the attacker...
