243 matches found
CVE-2024-0132
CVE-2024-0132 CVE-2024-0132 PoC 기본 이미지를 결정하는 것부터 시작하겠습니다. 시스템 내 라이브러리 배열은 이미지 종류에 따라 달라집니다. 예를 들어 alpine의 경우 /usr/lib64/, ubuntu의 경우 /usr/lib/x8664-linux-gnu입니다. 여기서는 ubuntu를 기본 이미지로 사용합니다. FROM ubuntu nvidia 컨테이너 툴킷은 컨테이너 내부의 /usr/local/cuda/compat/에 있는 라이브러리를 확인한 다음 이를 메인 라이브러리 디렉터리에 마운트합니다. 이...
poc-cve-2024-0132
poc-cve-2024-0132 재현 환경: os: ubuntu 22.04 with nvidia driver docker: v27.1.0 nvidia-container-toolkit: v1.16.1 재현 단계: poc 컨테이너 이미지 실행 목표: 컨테이너 내에서 호스트 파일 접근 컨테이너 내 docker.sock을 통해 Docker 데몬 API 호출 재현 사전 빌드된 poc 이미지 ssst0n3/poc-cve-2024-0132를 사용하거나, 소스에서 직접 빌드하세요. root@wanglei-gpu3: git clone...
CVE-2025-23266
CVE-2025-23266 CVE-2025-23266 – 완전히 무기화된 NVIDIA 컨테이너 툴킷 익스플로잇 참조 https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...
CVE-2025-23266
CVE-2025-23266 저자: Mark Mallia 대상 플랫폼: Ubuntu 22.04, FastAPI v2.4.3 → v2.5.1로 패치 2025‑10‑02 1 – 간단히: 이 공격이 수반하는 것은 FastAPI의 parserequest 루틴은 HTTP 요청 헤더를 호출자의 스택에 있는 작은 버퍼로 복사합니다. 공격자가 너무 긴 헤더를 보내면 해당 버퍼가 오버플로되어 그 뒤에 있는 반환 주소 를 덮어씁니다. 그러면 공격자는 동일한 요청 내부로 다시 점프하여 임의 코드를 실행하고 호스트 머신의 전체 제어권을 획득합니다. ...
CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0
CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GY71678 Security fix for CVE-2026-41579 applied in: cadvisor 0.55.1-r1, cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, nvidia-container-toolkit 1.19.0-r2
CVE-2026-41579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JK26072 Security fix for CVE-2025-50688 applied in: nvidia-container-toolkit 1.19.0-r3
Security vulnerability affects the nvidia-container-toolkit package. This issue is resolved in later releases. See references for vulnerability details...
AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-4097 vulnerabilities
Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, buildah, nvidia-container-toolkit, grafana-alloy, podman, node-feature-discovery, falco-no-driver, k3s...
GO-2025-4096 vulnerabilities
Vulnerabilities for packages: sriov-network-device-plugin, kubernetes, buildah, nvidia-container-toolkit, grafana-alloy, podman, node-feature-discovery, falco-no-driver, k3s...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: cadvisor, sriov-network-device-plugin, buildah, nvidia-container-toolkit, k8s-device-plugin, podman, node-feature-discovery, falco-no-driver...