243 matches found
poc-cve-2024-0132
poc-cve-2024-0132 复现环境： 操作系统：Ubuntu 22.04 搭配 NVIDIA 驱动 Docker：v27.1.0 nvidia-container-toolkit：v1.16.1 复现步骤： 运行 POC 容器镜像 目标： 在容器内访问主机文件 通过容器内的 docker.sock 调用 Docker 守护进程 API 复现 使用预构建的 POC 镜像 ssst0n3/poc-cve-2024-0132，或自行从源码构建。 root@wanglei-gpu3: git clone...
CVE-2025-23266
CVE-2025-23266 CVE-2025-23266 – 全武器化的NVIDIA容器工具包漏洞利用 参考 https://github.com/ctrsploit/ctrsploit/tree/public/vul/cve-2025-23266...
CVE-2025-23266
CVE-2025-23266 作者： Mark Mallia 目标平台： Ubuntu 22.04，FastAPI v2.4.3 → 于2025‑10‑02修补至v2.5.1 1 – 简介：此攻击涉及什么 FastAPI 的 parserequest 例程会将 HTTP 请求头部复制到一个位于调用者堆栈上的小型缓冲区中。 如果攻击者发送了过长的头部，该缓冲区会发生溢出，并重写紧随其后的 返回地址 。随后攻击者跳回同一次请求，执行任意代码，从而完全控制宿主机。 其效果类似于为 Triton Inference Server 发现的 RCE 链——唯一的区别在于缓冲区的确切长度（528...
CVE-2024-0132
CVE-2024-0132 CVE-2024-0132 PoC Empecemos decidiendo una imagen base. La disposición de las bibliotecas en el sistema depende de cuál sea. Por ejemplo, para alpine será /usr/lib64/, para ubuntu será /usr/lib/x8664-linux-gnu. Usaremos ubuntu como imagen base. FROM ubuntu El nvidia containter toolk...
CLEANSTART-2026-ZC33521 Security fix for CVE-2025-22873 applied in: cosign 2.4.3-r0, cosign 2.5.3-r0, flux-notification-controller-fips 1.5.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, nvidia-container-toolkit 1.19.0-r0, prometheus-node-exporter 1.8.0-r3, runc 1.1.14-r0
CVE-2025-22873 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GY71678 Security fix for CVE-2026-41579 applied in: cadvisor 0.55.1-r1, cadvisor 0.56.2-r1, cadvisor 0.57.0-r1, cadvisor 0.57.0-r2, cadvisor 0.60.2-r1, nvidia-container-toolkit 1.19.0-r2
CVE-2026-41579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JK26072 Security fix for CVE-2025-50688 applied in: nvidia-container-toolkit 1.19.0-r3
Security vulnerability affects the nvidia-container-toolkit package. This issue is resolved in later releases. See references for vulnerability details...
AZL-99312 CVE-2026-78662 affecting package nvidia-container-toolkit 1.17.8-4
Previously, a channel registered in the mux's chanList is not usable until it is established. A malicious peer was able flood the channel's incomingRequests, deadlocking the entire connection. Now, we add an atomic established state, set when a channel becomes usable. Until such a time,...
AZL-99309 CVE-2026-56855 affecting package nvidia-container-toolkit 1.17.8-4
Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. Now, we handle all RFC 4254 channel messages; global requests are handled explicitly. Then, treat all other messages as a protocol error and tear the connectio...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-3992 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3237 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2024-3239 vulnerabilities
Vulnerabilities for packages: nvidia-container-toolkit...
GO-2025-4097 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, k3s, podman, buildah, sriov-network-device-plugin, grafana-alloy, falco-no-driver, kubernetes...
GO-2025-4096 vulnerabilities
Vulnerabilities for packages: node-feature-discovery, nvidia-container-toolkit, k3s, podman, buildah, sriov-network-device-plugin, grafana-alloy, falco-no-driver, kubernetes...
GO-2026-5761 vulnerabilities
Vulnerabilities for packages: k8s-device-plugin, node-feature-discovery, nvidia-container-toolkit, cadvisor, podman, sriov-network-device-plugin, buildah, falco-no-driver...