nvidia-container-toolkit

9 results · Clear filters · Feed

• Medium 6.5
  CVE-2025-61727

  Improper application of excluded DNS name constraints when verifying wildcard names in crypto/x509

  An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.exa…

  Go standard library crypto/x509 katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Dec 3, 2025
• Medium 6.8
  CVE-2025-4673

  Sensitive headers not cleared on cross-origin redirect in net/http

  Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information.

  Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 11, 2025
• Medium 4.0
  CVE-2025-22866

  Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

  Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is en…

  Go standard library crypto/internal/nistec go zot Debian Ubuntu Alpine Wolfi Go
  Feb 6, 2025
• Medium 4.1
  CVE-2024-0134

  NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted conta…

  NVIDIA NVIDIA Container Toolkit NVIDIA GPU Operator nvidia-container-toolkit Azure Linux Wolfi
  Nov 5, 2024
• Medium 4.1
  CVE-2024-0133

  NVIDIA Container Toolkit allows specially crafted container image to create empty files on the host file system

  NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exp…

  NVIDIA Container Toolkit GPU Operator nvidia-container-toolkit Azure Linux Wolfi Go
  Sep 26, 2024
• Medium 4.3
  CVE-2024-34155

  Stack exhaustion in all Parse functions in go/parser

  Calling any of the Parse functions on Go source code which contains deeply nested literals can cause a panic due to stack exhaustion.

  Go standard library go/parser katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Sep 6, 2024
• Medium 5.3
  CVE-2024-24789

  Mishandling of corrupt central directory record in archive/zip

  The archive/zip package's handling of certain types of invalid zip files differs from the behavior of most zip implementations. This misalignment could be exploited to create an zip file with contents that vary depending on the implementation reading the file…

  Go standard library archive/zip golang go Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jun 5, 2024
• Medium 6.4
  CVE-2024-24787 Public exploit

  Arbitrary code execution during build on Darwin in cmd/go

  On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the -lto_library flag in a "#cgo LDFLAGS" directive.

  Go toolchain cmd/go katib-suggestion-hyperopt katib-earlystopping Azure Linux Wolfi Go
  May 8, 2024
• Medium 5.9
  CVE-2024-24788

  Malformed DNS message can cause infinite loop in net

  A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop.

  Go standard library net golang go Ubuntu Azure Linux Alpine Wolfi Go
  May 8, 2024