NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system

概要

参考情報

• NVIDIA/libnvidia-container security advisory · WEB
• NVIDIA/nvidia-container-toolkit security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-0133 · ADVISORY
• advisory-inbox.githubapp.com/advisory_reviews/GHSA-wqq7-v22c-gpfp · WEB
• NVIDIA/nvidia-container-toolkit · PACKAGE
• nvidia.custhelp.com/app/answers/detail/a_id/5582 · WEB

github.com/NVIDIA/nvidia-container-toolkit のその他の脆弱性

• CVE-2025-23267高 8.5NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link followi…
• CVE-2025-23266緊急 9.0NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could …
• CVE-2024-0132高 8.3NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration …