Описание
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.
Дополнительная информация
Статус:
Moderate
Дефект:
CWE-617
https://bugzilla.redhat.com/show_bug.cgi?id=2503746github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request
EPSS
Процентиль: 16%
0.00243
Низкий
6.5 Medium
CVSS3
Связанные уязвимости
CVSS3: 7.5
ubuntu
около 1 месяца назад
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
CVSS3: 7.5
nvd
около 1 месяца назад
A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.
CVSS3: 7.5
debian
около 1 месяца назад
A malicious BuildKit client or frontend could craft a request that cou ...
EPSS
Процентиль: 16%
0.00243
Низкий
6.5 Medium
CVSS3