Описание
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| golang-github-moby-buildkit | itp | package |
Примечания
https://github.com/moby/buildkit/security/advisories/GHSA-cv6p-7w7g-xjwq
Связанные уязвимости
ubuntu
около 1 месяца назад
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.
CVSS3: 6.2
redhat
около 1 месяца назад
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.
nvd
около 1 месяца назад
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all builds running on that daemon.
