NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system

Mô tả

Tham khảo

• NVIDIA/libnvidia-container security advisory · WEB
• NVIDIA/nvidia-container-toolkit security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2024-0133 · ADVISORY
• advisory-inbox.githubapp.com/advisory_reviews/GHSA-wqq7-v22c-gpfp · WEB
• NVIDIA/nvidia-container-toolkit · PACKAGE
• nvidia.custhelp.com/app/answers/detail/a_id/5582 · WEB

Lỗ hổng khác của github.com/NVIDIA/nvidia-container-toolkit

• CVE-2025-23267CAO 8.5NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link followi…
• CVE-2025-23266NGHIÊM TRỌNG 9.0NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could …
• CVE-2024-0132CAO 8.3NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use (TOCTOU) vulnerability when used with default configuration …