CVE-2021-1056

CVE-2021-1056 CVE-2021-1056는 제가 NVIDIA PSIRT에 제출한 취약점입니다. 개인적으로 이 취약점은 멀티 테넌트 HPC 클러스터, 특히 클라우드 머신러닝 플랫폼에서 높은 보안 위험을 초래할 수 있습니다. 이 저장소는 nvidia-container-runtime으로 생성된 GPU 컨테이너에서 이 취약점을 간단히 시연합니다. 작동 방식 공격자는 GPU 컨테이너nvidia-container-runtime으로 생성된 컨테이너에서 특정 문자 디바이스 파일을 생성함으로써 호스트의 모든 GPU 디바이스에 접근할 ...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: kubernetes-fips, neuvector-scanner, opentelemetry-collector-contrib, buildah, cadvisor-fips, grafana-alloy, cluster-autoscaler, eks-distro-fips, ctop, cluster-autoscaler-fips, k3s, eks-distro, node-feature-discovery, neuvector, opentelemetry-collector-contrib-fips,...

GO-2026-5761 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, sriov-network-device-plugin, node-feature-discovery, cadvisor, podman, buildah, nvidia-container-toolkit...

GO-2024-3110 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, grype, syft, ctop, grafana-alloy, podman, kubernetes, buildah, k3s, cadvisor, runc, neuvector-scanner, docker, opentelemetry-collector-contrib...

GO-2024-2994 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, k8s-device-plugin, ip-masq-agent, argocd-image-updater, kubeflow-pipelines, cri-tools, kubernetes-csi-driver-hostpath, kubernetes-dns-node-cache, aws-efs-csi-driver, spark-operator, nodetaint...

GO-2026-4441 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, gitness, aws-load-balancer-controller, k3s, runc...

GO-2024-3286 vulnerabilities

Vulnerabilities for packages: local-static-provisioner, k8s-device-plugin, kubeflow-pipelines, ip-masq-agent, argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint...

GO-2026-4440 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, wuzz, fuse-overlayfs-snapshotter, gitness, aws-load-balancer-controller, k3s, runc...

GO-2026-4864 vulnerabilities

Vulnerabilities for packages: gitlab-kas, libnvidia-container, gitlab-pages, kubernetes-dashboard, fuse-overlayfs-snapshotter, prometheus-operator, karpenter, kyverno, aws-flb-kinesis, go, newrelic-fluent-bit-output, prometheus, kots, mattermost, fscrypt, falco-no-driver, datadog-agent,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin-fips, podman-fips, buildah, cadvisor-fips, rancher, node-feature-discovery-fips, rancher-agent, prometheus-podman-exporter, node-feature-discovery, prometheus-podman-exporter-fips, sriov-network-device-plugin-fips, k8s-device-plugin,...

GHSA-XJVP-4FHW-GC47 vulnerabilities

Vulnerabilities for packages: k8s-device-plugin, sriov-network-device-plugin, node-feature-discovery, cadvisor, podman, buildah, nvidia-container-toolkit...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: gitlab-kas, libnvidia-container, gitlab-pages, kubernetes-dashboard, fuse-overlayfs-snapshotter, prometheus-operator, karpenter, kyverno, aws-flb-kinesis, go, newrelic-fluent-bit-output, prometheus, kots, mattermost, fscrypt, falco-no-driver, datadog-agent,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: terraform-provider-aws, otel-cli, rancher-agent, govulncheck, nri-redis, bom, knative-operator, addon-resizer, sftpgo, step-ca, wuzz, amazon-cloudwatch-agent-operator, amazon-k8s-cni, nsc, postgres-operator, terraform-provider-sendgrid, kubescape, whereabouts, dex,...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: sbom-scorecard, govulncheck, gosu, bom, src-fingerprint, sftpgo, trust-manager, wuzz, postgres-operator, amazon-k8s-cni, nsc, whereabouts, dex, metallb, glow, velero-plugin-for-microsoft-azure, cert-manager-cmctl, openbao-k8s, restic, thanos, oauth2-proxy,...

CVE-2024-45336 vulnerabilities

Vulnerabilities for packages: oauth2-proxy, karma-fips, rancher-loglevel, grpc-health-probe, nats, dataplaneapi, flux-image-automation-controller, flux-image-automation-controller-fips, redka, bank-vaults-fips, vault-secrets-operator, minify, hubble-fips, ghaudit, lvm-driver, spark-operator-fips,...