Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-23650

Опубликовано: 31 янв. 2024
Источник: debian

Описание

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
golang-github-moby-buildkititppackage

Связанные уязвимости

CVSS3: 5.3
ubuntu
почти 3 года назад

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

CVSS3: 5.3
redhat
почти 3 года назад

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

CVSS3: 5.3
nvd
почти 3 года назад

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

CVSS3: 5.3
msrc
9 месяцев назад

BuildKit possible panic when incorrect parameters sent from frontend

CVSS3: 5.3
github
почти 3 года назад

BuildKit vulnerable to possible panic when incorrect parameters sent from frontend