Описание
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
A flaw was found in BuildKit, a tool used for building container images. A malicious actor could send a specially crafted message to the BuildKit API, allowing them to delete files outside of the build container's intended area. Specifically, this vulnerability enables the deletion of files within the host system's temporary directory, which could lead to a denial of service or impact system operations.
Отчет
This vulnerability is rated as Moderate severity because exploitation requires processing an untrusted container build request, and the resulting impact is confined to the host temporary directory without granting arbitrary code execution or exposing confidential data. Red Hat Enterprise Linux natively utilizes Podman and Buildah for container creation, so BuildKit is not part of the default platform tooling. Systems running BuildKit in automated build pipelines or shared infrastructure where untrusted actors submit build definitions face potential service disruption if transient files are deleted.
Дополнительная информация
Статус:
5.7 Medium
CVSS3
Связанные уязвимости
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.
A crafted message in the BuildKit low-level build API can be used to r ...
5.7 Medium
CVSS3