Описание
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.31.2 (исключая)
cpe:2.3:a:mobyproject:buildkit:*:*:*:*:*:*:*:*
EPSS
Процентиль: 17%
0.00249
Низкий
7.5 High
CVSS3
Дефекты
CWE-22
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 1 месяца назад
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
CVSS3: 7.5
debian
около 1 месяца назад
A crafted message in the BuildKit low-level build API can be used to r ...
EPSS
Процентиль: 17%
0.00249
Низкий
7.5 High
CVSS3
Дефекты
CWE-22