{"metadata": {"vulnerability": "CVE-2025-23359", "count": 56, "kinds": {"milestone": 6, "sighting": 32, "kev": 0, "other": 18}}, "data": [{"timestamp": "2025-01-14T01:07:26.681Z", "date_only": false, "value": "2025-01-14T01:07:26.681Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-23359", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-02-02T00:00:00Z", "date_only": false, "value": "2025-02-02T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-23359", "record": "MSRC_CVE-2025-23359", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-11T19:39:29.625Z", "date_only": false, "value": "2025-02-11T19:39:29.625856Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113986946256894513", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "023d4397-ba92-48a7-83f9-ad9c67e60109", "url": "https://infosec.exchange/users/screaminggoat/statuses/113986946256894513"}, {"timestamp": "2025-02-12T00:52:43.646Z", "date_only": false, "value": "2025-02-12T00:52:43.646Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-23359", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-02-12T00:52:43.646Z", "date_only": false, "value": "2025-02-12T00:52:43.646Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / nvidia", "record": "CVE-2025-23359", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-02-12T00:58:21.178Z", "date_only": false, "value": "2025-02-12T00:58:21.178505Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/113988200059363819", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "10a50bdf-89c5-4449-a3ab-9c04764df13c", "url": "https://infosec.exchange/users/cve/statuses/113988200059363819"}, {"timestamp": "2025-02-12T01:15:09Z", "date_only": false, "value": "2025-02-12T01:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-4HMH-PM5P-9J7J", "record": "GHSA-4HMH-PM5P-9J7J", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-02-12T01:15:09.230Z", "date_only": false, "value": "2025-02-12T01:15:09.230", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23359", "record": "FKIE_CVE-2025-23359", "field": "published"}, {"timestamp": "2025-02-12T01:15:58.918Z", "date_only": false, "value": "2025-02-12T01:15:58.918197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwyrl4exz2z", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "61f57a06-d9a8-488e-8f5e-3dfefbfd6b10", "url": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhwyrl4exz2z"}, {"timestamp": "2025-02-12T02:48:34.254Z", "date_only": false, "value": "2025-02-12T02:48:34.254998Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113988633470725836", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "01189268-1bec-4e65-9336-ce62abfdbad7", "url": "https://mastodon.social/users/CyberSignaler/statuses/113988633470725836"}, {"timestamp": "2025-02-12T03:00:28Z", "date_only": false, "value": "2025-02-12T03:00:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1CU4p-35uR_OEd5tkAHkEjg_BY2nsASvWGQ5wETIDJqGUhs", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "22b0c87f-8048-4c24-b66f-52a07bf16e58"}, {"timestamp": "2025-02-12T03:31:14Z", "date_only": false, "value": "2025-02-12T03:31:14Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-4HMH-PM5P-9J7J", "record": "GHSA-4HMH-PM5P-9J7J", "field": "published"}, {"timestamp": "2025-02-12T04:08:47Z", "date_only": false, "value": "2025-02-12T04:08:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4004", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "f6082a6d-99dd-48ce-aa65-6e7fb5fb51e9", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23359\n\ud83d\udd25 CVSS Score: 9.2 (CVSS_V3)\n\ud83d\udd39 Description: NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.\n\ud83d\udccf Published: 2025-02-12T03:31:14Z\n\ud83d\udccf Modified: 2025-02-12T03:31:14Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-23359\n2. https://nvidia.custhelp.com/app/answers/detail/a_id/5616", "url": "https://t.me/DarkWebInformer_CVEAlerts/4004"}, {"timestamp": "2025-02-12T04:19:17Z", "date_only": false, "value": "2025-02-12T04:19:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cvedetector/17795", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "c4496812-48e3-4219-946f-02f155fabe67", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-23359 - NVIDIA Container Toolkit TOCTOU File System Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-23359 \nPublished : Feb. 12, 2025, 1:15 a.m. | 1\u00a0hour, 16\u00a0minutes ago \nDescription : NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. \nSeverity: 8.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "url": "https://t.me/cvedetector/17795"}, {"timestamp": "2025-02-12T04:24:53.470Z", "date_only": false, "value": "2025-02-12T04:24:53.470026Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxddbnj3f2v", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "cee9eb79-eff4-4eb5-b464-2a9ca13b969d", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhxddbnj3f2v"}, {"timestamp": "2025-02-12T13:04:00Z", "date_only": false, "value": "2025-02-12T13:04:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/02/researchers-find-new-exploit-bypassing.html", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "2ab939d2-10ba-4961-b111-9ffb69a92e74", "url": "https://thehackernews.com/2025/02/researchers-find-new-exploit-bypassing.html"}, {"timestamp": "2025-02-12T15:23:47Z", "date_only": false, "value": "2025-02-12T15:23:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/6330", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "2a5d7721-3c13-463e-90fd-6382ba2e56ec", "content": "\ud83d\udea8 Alert - A new vulnerability (CVE-2025-23359) in NVIDIA's Container Toolkit could break container isolation and give attackers full access to your system.\n\nIf exploited, attackers could bypass isolation protections, accessing your files and even running malicious code.\n\n\ud83d\udd17 Get all the details: https://thehackernews.com/2025/02/researchers-find-new-exploit-bypassing.html", "url": "https://t.me/thehackernews/6330"}, {"timestamp": "2025-02-12T15:31:09.669Z", "date_only": false, "value": "2025-02-12T15:31:09.669853Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lhyikqy34q2g", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "668176d7-3469-48ee-9b20-988192868686", "url": "https://bsky.app/profile/hackingne.ws/post/3lhyikqy34q2g"}, {"timestamp": "2025-02-12T16:32:28Z", "date_only": false, "value": "2025-02-12T16:32:28.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Aa-mJwZiwTCfoBEQv0lRdJpPDlbI1xOoLBXO2yYDbMtOaA", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "b20d2cb1-60e3-4f59-84ce-1f23a0e696fd"}, {"timestamp": "2025-02-13T12:16:18Z", "date_only": false, "value": "2025-02-13T12:16:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/02/13/researchers-find-new-exploit-bypassing.html", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "304fa0e8-ecc2-4da8-9c54-44487fbbc415", "url": "https://threatintel.cc/2025/02/13/researchers-find-new-exploit-bypassing.html"}, {"timestamp": "2025-02-13T13:35:57Z", "date_only": false, "value": "2025-02-13T13:35:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/true_secator/6729", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "4ab3b8ad-9c6b-416e-8631-1851180380cc", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wiz \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u043e\u0431\u0445\u043e\u0434\u0430 \u0443\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NVIDIA Container Toolkit, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u0445\u043e\u0434\u0430 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u043e\u0432\u043e\u043c\u0443 \u0445\u043e\u0441\u0442\u0443.\n\n\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-23359 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS: 8.3.\n\n\u041e\u043d\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 NVIDIA Container Toolkit (\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 1.17.3 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 1.17.4) \u0438 NVIDIA GPU Operator (\u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 24.9.1 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 24.9.2).\n\n\u0412 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u044e\u0442, \u0447\u0442\u043e NVIDIA Container Toolkit \u0434\u043b\u044f Linux \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TOCTOU\u00a0(Time-of-Check Time-of-Use) \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0435\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e, \u043a\u043e\u0433\u0434\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0445\u043e\u0441\u0442\u0430.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE, DoS, EoP, \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wiz \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u043c\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u0432 \u0435\u0435 \u043a\u0430\u043a \u043e\u0431\u0445\u043e\u0434 \u0434\u0440\u0443\u0433\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-0132 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS: 9,0, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 NVIDIA \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0412\u043a\u0440\u0430\u0442\u0446\u0435, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u0443\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0445\u043e\u0441\u0442\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0438\u043c \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0444\u0430\u0439\u043b\u0430\u043c.\n\n\u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u044d\u0442\u043e\u0442 \u0434\u043e\u0441\u0442\u0443\u043f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430 \u0445\u043e\u0441\u0442\u0430 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u043a\u0435\u0442 Unix \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f.\n\n\u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u043f\u0443\u0442\u0438 \u043a \u0444\u0430\u0439\u043b\u0430\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043c\u043e\u0436\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u0438 \u0434\u043e\u0431\u0438\u0432\u0430\u044f\u0441\u044c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u0432\u043d\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 (\u0442.\u0435. \u0438\u0437 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430) \u0432 \u043f\u0443\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0438 \u00ab/usr/lib64\u00bb.\n\n\u0425\u043e\u0442\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0445\u043e\u0441\u0442\u0430, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u044b\u0445\u043e\u0434\u0435 \u0438\u0437 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430, \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0447\u0442\u0435\u043d\u0438\u044f, \u044d\u0442\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438, \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044f \u0441 \u0441\u043e\u043a\u0435\u0442\u0430\u043c\u0438 Unix \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438, \u044d\u0442\u043e\u0442 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a, \u043e\u0442\u043b\u0430\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0440\u044f\u0434 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0445\u043e\u0441\u0442\u0430.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NVIDIA Container Toolkit \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043d\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u00a0\u0444\u043b\u0430\u0433 \u00ab--no-cntlibs\u00bb\u00a0\u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.", "url": "https://t.me/true_secator/6729"}, {"timestamp": "2025-02-13T15:45:09Z", "date_only": false, "value": "2025-02-13T15:45:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itsec_news/5391", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "1a2d6d8c-feb2-4ca7-a0ca-092c6df63a93", "content": "\u200b\u26a1\ufe0fCVE-2025-23359: \u043d\u043e\u0432\u0430\u044f \u043b\u0430\u0437\u0435\u0439\u043a\u0430 \u0432 \u0441\u043e\u0444\u0442\u0435 Nvidia \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u043e\u0434 \u0443\u0434\u0430\u0440\n\n\ud83d\udcac \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u043e\u0431\u0445\u043e\u0434\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 NVIDIA Container Toolkit, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u044c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442\u0443. \u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-23359 \u0438 \u043e\u0446\u0435\u043d\u043a\u0443 8.3 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432:\n\nNVIDIA Container Toolkit \u2014 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 1.17.3 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 1.17.4)\nNVIDIA GPU Operator \u2014 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 24.9.1 (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 24.9.2)\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f NVIDIA \u0432 \u0441\u0432\u043e\u0451\u043c \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u043c \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0438 \u0443\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e TOCTOU (Time-of-Check to Time-of-Use). \u0412 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0445\u043e\u0441\u0442\u0430. \u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430, \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043e\u0442\u043a\u0430\u0437\u0430 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0438 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0439 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Wiz, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u044e\u0449\u0430\u044f\u0441\u044f \u043d\u0430 \u043e\u0431\u043b\u0430\u0447\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0435\u0442\u0430\u043b\u0438 . \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e CVE-2025-23359 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u043c \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u0434\u043b\u044f \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2024-0132 (CVSS: 9.0), \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0439 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u0440\u043d\u0435\u0432\u0443\u044e \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0445\u043e\u0441\u0442\u0430 \u0432\u043d\u0443\u0442\u0440\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430, \u043f\u043e\u043b\u0443\u0447\u0438\u0432 \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c. \u041f\u043e\u043c\u0438\u043c\u043e \u044d\u0442\u043e\u0433\u043e, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 Unix-\u0441\u043e\u043a\u0435\u0442\u044b, \u0447\u0442\u043e \u0432\u0435\u0434\u0451\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0445\u043e\u0441\u0442\u0430.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Wiz \u0428\u0438\u0440 \u0422\u0430\u043c\u0430\u0440\u0438, \u0420\u043e\u043d\u0435\u043d \u0428\u0443\u0441\u0442\u0438\u043d \u0438 \u0410\u043d\u0434\u0440\u0435\u0441 \u0420\u0438\u0430\u043d\u0447\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438, \u0447\u0442\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u043e\u0432 \u0432 NVIDIA Container Toolkit \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u0442\u044c \u043f\u0443\u0442\u0438 \u0442\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0438\u0437 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0445\u043e\u0441\u0442\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Unix-\u0441\u043e\u043a\u0435\u0442\u044b \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432.\n\n\u0425\u043e\u0442\u044f \u0431\u0430\u0437\u043e\u0432\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043b\u0438\u0448\u044c \u0447\u0442\u0435\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u043e\u0441\u0442\u0430, \u044d\u0442\u043e\u0442 \u0431\u0430\u0440\u044c\u0435\u0440 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u0442\u044c \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0442\u0440\u0430\u0444\u0438\u043a, \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u044b \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043d\u0430 \u0445\u043e\u0441\u0442\u0435.\n\n\u041f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c NVIDIA Container Toolkit \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438 \u043d\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u0444\u043b\u0430\u0433 \u00ab--no-cntlibs\u00bb \u0432 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0430\u0445.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5391"}, {"timestamp": "2025-02-13T19:55:02.204Z", "date_only": false, "value": "2025-02-13T19:55:02.204604Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li3hri72i226", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "c267163f-b3cc-409a-8350-027b1b6c4edb", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li3hri72i226"}, {"timestamp": "2025-02-14T15:04:14.558Z", "date_only": false, "value": "2025-02-14T15:04:14.558909Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3li5hyh6v4323", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "f93ed97e-6f1d-437f-8009-acaa11fdfdec", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3li5hyh6v4323"}, {"timestamp": "2025-02-14T15:09:48.241Z", "date_only": false, "value": "2025-02-14T15:09:48.241251Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/andersonc0d3/statuses/114002872744958710", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "4a0bfbcd-390b-4ecb-8d90-c3607078f06a", "url": "https://infosec.exchange/users/andersonc0d3/statuses/114002872744958710"}, {"timestamp": "2025-02-14T15:10:01.593Z", "date_only": false, "value": "2025-02-14T15:10:01.593789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andersonc0d3.bsky.social/post/3li5icrcfnc2f", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "4907f3e5-c136-40f8-9f18-69e36c609b3d", "url": "https://bsky.app/profile/andersonc0d3.bsky.social/post/3li5icrcfnc2f"}, {"timestamp": "2025-02-14T19:12:24.476Z", "date_only": false, "value": "2025-02-14T19:12:24.476145Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arty-san.bsky.social/post/3li5vu5vh2c2a", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "4fa7bf4f-f064-441f-baa6-fad27f6c8439", "url": "https://bsky.app/profile/arty-san.bsky.social/post/3li5vu5vh2c2a"}, {"timestamp": "2025-02-16T07:51:52.154Z", "date_only": false, "value": "2025-02-16T07:51:52.154431Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sakaijjang.bsky.social/post/3libqqxuswk22", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "7b7c25c1-90fa-4232-8dde-3c34bedf0a7c", "url": "https://bsky.app/profile/sakaijjang.bsky.social/post/3libqqxuswk22"}, {"timestamp": "2025-02-19T05:00:00Z", "date_only": false, "value": "2025-02-19T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-087/", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "18d848db-cf87-4f46-8ea9-fb85ae8e4f03", "url": "http://www.zerodayinitiative.com/advisories/ZDI-25-087/"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-23359", "record": "MSRC_CVE-2025-23359", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-02-23T00:00:00Z", "date_only": false, "value": "2025-02-23T00:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-23359", "record": "MSRC_CVE-2025-23359", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-03-14T00:00:00Z", "date_only": false, "value": "2025-03-14T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-23359", "record": "MSRC_CVE-2025-23359", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-04-10T16:19:38Z", "date_only": false, "value": "2025-04-10T16:19:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6648", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "bf4b3b4d-e10c-4faa-a142-eb9e3103c899", "content": "\ud83d\udea8 NVIDIA\u2019s critical security fix failed!\n\nNVIDIA\u2019s patch for CVE-2024-0132 (CVSS 9.0) was incomplete \u2014 attackers can still escape containers and gain root access (CVE-2025-23359).\n\n\ud83d\udc40 Admins: Threat actors are watching...\n\u2705 Patch now\n\u2705 Audit your containers\n\u2705 Lock down Docker APIs\n\nFull report \u2794 https://thehackernews.com/2025/04/incomplete-patch-in-nvidia-toolkit.html", "url": "https://t.me/thehackernews/6648"}, {"timestamp": "2025-04-11T13:20:19.602Z", "date_only": false, "value": "2025-04-11T13:20:19.602945Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23359", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-11T13:20:19.602Z", "date_only": false, "value": "2025-04-11T13:20:19.602945Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23359", "record": "FKIE_CVE-2025-23359", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-11T13:24:14.643Z", "date_only": false, "value": "2025-04-11T13:24:14.643Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-23359", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-11T13:24:14.643Z", "date_only": false, "value": "2025-04-11T13:24:14.643Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-23359", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-11T13:51:22Z", "date_only": false, "value": "2025-04-11T13:51:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11427", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "822a3f4a-906b-4448-8f57-f40ae0fb4055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-23359\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: NVIDIA Container Toolkit for Linux contains a Time-of-Check Time-of-Use (TOCTOU) vulnerability when used with default configuration, where a crafted container image could gain access to the host file system. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.\n\ud83d\udccf Published: 2025-02-12T00:52:43.646Z\n\ud83d\udccf Modified: 2025-04-11T13:24:14.643Z\n\ud83d\udd17 References:\n1. https://nvidia.custhelp.com/app/answers/detail/a_id/5616", "url": "https://t.me/DarkWebInformer_CVEAlerts/11427"}, {"timestamp": "2025-04-11T15:32:26Z", "date_only": false, "value": "2025-04-11T15:32:26Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-4HMH-PM5P-9J7J", "record": "GHSA-4HMH-PM5P-9J7J", "field": "modified"}, {"timestamp": "2025-04-12T02:00:49Z", "date_only": false, "value": "2025-04-12T02:00:49.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/3011", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "edfa23d7-0ac9-4f17-9ccb-fa631d7ddbef", "content": "\u26a1\ufe0fNVIDIA\u2019s patch for CVE-2024-0132 (CVSS 9.0) was incomplete \u2014 attackers can still escape containers and gain root access (CVE-2025-23359).\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3011"}, {"timestamp": "2025-04-15T09:16:23Z", "date_only": false, "value": "2025-04-15T09:16:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/rafa_sec/125", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "3e65d38b-6a2c-4ab8-a7b0-38cae475705e", "content": "\ud83d\udea8 NVIDIA\u2019s critical security fix failed!\n\nNVIDIA\u2019s patch for CVE-2024-0132 (CVSS 9.0) was incomplete \u2014 attackers can still escape containers and gain root access (CVE-2025-23359).\n\n\ud83d\udc40 Admins: Threat actors are watching...\n\u2705 Patch now\n\u2705 Audit your containers\n\u2705 Lock down Docker APIs\n\nFull report \u2794 https://thehackernews.com/2025/04/incomplete-patch-in-nvidia-toolkit.html", "url": "https://t.me/rafa_sec/125"}, {"timestamp": "2025-04-19T17:10:10Z", "date_only": false, "value": "2025-04-19T17:10:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1121", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "7c8204db-fe9c-4732-a43d-5ebc13cf5391", "content": "\u0645\u062d\u0642\u0642\u0627\u0646 Trend Micro \u06a9\u0647 CVE-2025-23359 \u06a9\u0634\u0641 \u06a9\u0631\u062f\u0646\u062f \u0645\u0642\u0627\u0644\u0647 \u0627\u06cc \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\u0646\u062f.\n\n\u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c \u0622\u0646\u0647\u0627 \u0647\u0646\u06af\u0627\u0645 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0686\u0646\u062f\u06cc\u0646 \u0645\u0627\u0646\u062a \u062f\u0631 \u06cc\u06a9 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 \u0645\u062a\u0648\u062c\u0647 \u0628\u0631\u062e\u06cc \u0645\u0634\u06a9\u0644\u0627\u062a \u0639\u0645\u0644\u06a9\u0631\u062f\u06cc \u0634\u062f\u0646\u062f \u06a9\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 DoS \u0634\u0648\u062f (\u0647\u0645\u0627\u0646 \u0645\u0634\u06a9\u0644 \u0639\u0645\u0644\u06a9\u0631\u062f \u0628\u0647 \u0637\u0648\u0631 \u0645\u0633\u062a\u0642\u0644 \u062a\u0648\u0633\u0637 moby \u0648 NVIDIA \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0627\u0633\u062a):\n\n1. \u0647\u0646\u06af\u0627\u0645\u06cc \u06a9\u0647 \u06cc\u06a9 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631 \u062c\u062f\u06cc\u062f \u0628\u0627 \u0686\u0646\u062f\u06cc\u0646 \u0645\u0627\u0646\u062a \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0634\u062f\u0647 \u0628\u0627 ( bind-propagation=shared ) \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u0634\u0648\u062f\u060c \u0686\u0646\u062f\u06cc\u0646 \u0645\u0633\u06cc\u0631 \u0648\u0627\u0644\u062f/\u0641\u0631\u0632\u0646\u062f \u062a\u0646\u0638\u06cc\u0645 \u0645\u06cc \u0634\u0648\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062d\u0627\u0644\u060c \u067e\u0633 \u0627\u0632 \u062e\u0627\u062a\u0645\u0647 \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631\u060c \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0627\u0632 \u062c\u062f\u0648\u0644 \u0646\u0635\u0628 \u0644\u06cc\u0646\u0648\u06a9\u0633 \u062d\u0630\u0641 \u0646\u0645\u06cc\u200c\u0634\u0648\u0646\u062f.\n\n2. \u0627\u06cc\u0646 \u0628\u0627\u0639\u062b \u0645\u06cc \u0634\u0648\u062f \u06a9\u0647 \u062c\u062f\u0648\u0644 mount \u0628\u0647 \u0633\u0631\u0639\u062a \u0648 \u0628\u0647 \u0637\u0648\u0631 \u063a\u06cc\u0631\u0642\u0627\u0628\u0644 \u06a9\u0646\u062a\u0631\u0644\u06cc \u0631\u0634\u062f \u06a9\u0646\u062f \u0648 \u062a\u0648\u0635\u06cc\u0641\u06af\u0631\u0647\u0627\u06cc \u0641\u0627\u06cc\u0644 \u0645\u0648\u062c\u0648\u062f ( fd ) \u0631\u0627 \u062e\u0633\u062a\u0647 \u06a9\u0646\u062f. \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a Docker \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0641\u0631\u0633\u0648\u062f\u06af\u06cc fd \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0627\u0646\u062a\u06cc\u0646\u0631\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0646\u06cc\u0633\u062a.\n\n3. \u0627\u06cc\u0646 \u062c\u062f\u0648\u0644 \u0646\u0635\u0628 \u0628\u06cc\u0634 \u0627\u0632 \u062d\u062f \u0628\u0632\u0631\u06af \u0628\u0627 \u062c\u0644\u0648\u06af\u06cc\u0631\u06cc \u0627\u0632 \u0627\u062a\u0635\u0627\u0644 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0628\u0647 \u0647\u0627\u0633\u062a (\u0645\u062b\u0644\u0627\u064b \u0627\u0632 \u0637\u0631\u06cc\u0642 SSH ) \u0628\u0627\u0639\u062b \u0645\u0634\u06a9\u0644\u0627\u062a \u062c\u062f\u06cc \u0639\u0645\u0644\u06a9\u0631\u062f \u0645\u06cc \u0634\u0648\u062f.\n\n\u0628\u0631 \u0627\u06cc\u0646 \u0627\u0633\u0627\u0633\u060c \u0628\u0631\u062e\u06cc \u0627\u0632 \u062c\u0632\u0626\u06cc\u0627\u062a \u0628\u0631\u0627\u06cc \u0628\u0647\u0631\u0647 \u0628\u0631\u062f\u0627\u0631\u06cc CVE-2025-23359 \u0641\u0627\u0634 \u0634\u062f (\u0627\u0645\u0627 \u0647\u06cc\u0686 PoC \u0627\u0631\u0627\u0626\u0647 \u0646\u0634\u062f):\n\n1. \u0645\u0647\u0627\u062c\u0645 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 \u067e\u06cc\u0648\u0646\u062f \u0646\u0645\u0627\u062f\u06cc\u0646 volume \u060c \u062f\u0648 \u062a\u0635\u0648\u06cc\u0631 \u0645\u062e\u0631\u0628 \u0645\u062e\u0631\u0628 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u062f.\n2. \u0645\u0647\u0627\u062c\u0645 \u0628\u0647 \u0637\u0648\u0631 \u0645\u0633\u062a\u0642\u06cc\u0645 \u06cc\u0627 \u063a\u06cc\u0631\u0645\u0633\u062a\u0642\u06cc\u0645 \u062a\u0635\u0648\u06cc\u0631 \u0631\u0627 \u0631\u0648\u06cc \u067e\u0644\u062a\u0641\u0631\u0645 \u0642\u0631\u0628\u0627\u0646\u06cc \u0627\u062c\u0631\u0627 \u0645\u06cc \u06a9\u0646\u062f\n3. \u0627\u06cc\u0646 \u0628\u0647 \u0645\u0647\u0627\u062c\u0645 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc \u062f\u0647\u062f \u062a\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0634\u0631\u0627\u06cc\u0637 \u0645\u0633\u0627\u0628\u0642\u0647 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0641\u0627\u06cc\u0644 \u0645\u06cc\u0632\u0628\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f.\n4. \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0645\u062a\u0639\u0627\u0642\u0628\u0627\u064b \u0628\u0647 \u0633\u0648\u06a9\u062a \u0647\u0627\u06cc Container Runtime Unix \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0646\u062f \u062a\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u062f\u0644\u062e\u0648\u0627\u0647 \u0631\u0627 \u0628\u0627 \u0627\u0645\u062a\u06cc\u0627\u0632\u0627\u062a root \u0627\u062c\u0631\u0627 \u06a9\u0646\u062f\u060c \u06cc\u0639\u0646\u06cc \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0628\u0631 \u0631\u0648\u06cc \u0633\u06cc\u0633\u062a\u0645 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062e\u0637\u0631 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f.\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\ud83d\udc6e\ud83c\udffd\u200d\u2640\ufe0f\u0647\u0631\u06af\u0648\u0646\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648 \u0630\u06a9\u0631 \u0645\u0637\u0627\u0644\u0628 \u0628\u062f\u0648\u0646 \u0630\u06a9\u0631 \u062f\u0642\u06cc\u0642 \u0645\u0646\u0628\u0639 \u0648 \u0622\u062f\u0631\u0633 \u0644\u06cc\u0646\u06a9 \u0622\u0646 \u0645\u0645\u0646\u0648\u0639 \u0627\u0633\u062a. \n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u0648\u0627\u062a\u0633 \u0622\u067e :\nhttps://chat.whatsapp.com/FpB620AWEeSKvd8U6cFh33\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR", "url": "https://t.me/ics_cert/1121"}, {"timestamp": "2025-04-27T01:23:15.493Z", "date_only": false, "value": "2025-04-27T01:23:15.493430Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnr3oinbr226", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "6d57cf87-d051-4cb9-8a37-057abcd26a6d", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnr3oinbr226"}, {"timestamp": "2025-07-24T20:38:54.848Z", "date_only": false, "value": "2025-07-24T20:38:54.848082Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-67efc907-5d48de1d9f6b78a7", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "6de5f392-2d95-4175-a616-e290b724264a", "url": "https://poliverso.org/objects/0477a01e-67efc907-5d48de1d9f6b78a7"}, {"timestamp": "2025-08-09T17:25:37Z", "date_only": false, "value": "2025-08-09T17:25:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "34e7375e-d8a7-424c-8d56-5b580fe946f4"}, {"timestamp": "2025-09-10T07:00:38Z", "date_only": false, "value": "2025-09-10T07:00:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "0ff215cc-564b-4f77-a73f-86388d2178ef"}, {"timestamp": "2025-11-24T07:58:47Z", "date_only": false, "value": "2025-11-24T07:58:47Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2025:4187-1", "record": "SUSE-SU-2025:4187-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-11-24T07:58:47Z", "date_only": false, "value": "2025-11-24T07:58:47Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2025:4187-1", "record": "SUSE-SU-2025:4187-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2025-11-24T07:58:47Z", "date_only": false, "value": "2025-11-24T07:58:47Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2025:4187-1", "record": "SUSE-SU-2025:4187-1", "field": "document.tracking.generator.date"}, {"timestamp": "2025-11-24T07:58:47Z", "date_only": false, "value": "2025-11-24T07:58:47Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2025:4187-1", "record": "SUSE-SU-2025:4187-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-11-24T07:58:47Z", "date_only": false, "value": "2025-11-24T07:58:47Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2025:4187-1", "record": "SUSE-SU-2025:4187-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-19T01:22:17Z", "date_only": false, "value": "2026-02-19T01:22:17.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-23359", "record": "MSRC_CVE-2025-23359", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-02-19T01:22:17Z", "date_only": false, "value": "2026-02-19T01:22:17.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-23359", "record": "MSRC_CVE-2025-23359", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-02-21T01:32:19.073Z", "date_only": false, "value": "2026-02-21T01:32:19.073Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-23359", "record": "MSRC_CVE-2025-23359", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T08:53:46.810Z", "date_only": false, "value": "2026-06-17T08:53:46.810", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-23359", "record": "FKIE_CVE-2025-23359", "field": "lastModified"}, {"timestamp": "2026-07-25T15:00:18.058Z", "date_only": false, "value": "2026-07-25T15:00:18.058161Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ZerodayAlert/425", "record": "CVE-2025-23359", "field": "creation_timestamp", "uuid": "379f9118-4fce-4632-be52-e9e7be5c1f28", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u0443\u044e \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e\n\n\ud83d\udd12 \u0412 NVIDIA Container Toolkit \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-23359, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043e 1.17.4 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0445\u043e\u0441\u0442-\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043d\u044b\u0439 \u043e\u0431\u0440\u0430\u0437.\n\n\ud83d\udd0d \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Wiz \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u0438, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0431\u0445\u043e\u0434\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u0434\u043b\u044f \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0431\u0430\u0433\u0430 CVE-2024-0132. \u041c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0441\u044b\u043b\u043a\u0438 \u0434\u043b\u044f \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0445\u043e\u0441\u0442\u0430 \u0432\u043d\u0443\u0442\u0440\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u0430.\n\n\u26a1\ufe0f \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043d\u043e \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b \u0447\u0435\u0440\u0435\u0437 Unix-\u0441\u043e\u043a\u0435\u0442\u044b. \u042d\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0441\u0435\u0442\u0435\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n#Nvidia #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 #\u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u044b #Docker\n\n@ZerodayAlert", "url": "https://t.me/ZerodayAlert/425"}]}