Описание
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-github-moby-buildkit | itp | package |
Примечания
https://github.com/moby/buildkit/security/advisories/GHSA-r456-g3gm-cvxf
EPSS
Процентиль: 14%
0.00235
Низкий
Связанные уязвимости
ubuntu
около 1 месяца назад
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.
CVSS3: 6.5
redhat
около 1 месяца назад
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.
nvd
около 1 месяца назад
If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by accident.
EPSS
Процентиль: 14%
0.00235
Низкий