Количество 14
Количество 14
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
CVE-2024-23652
BuildKit possible host system access from mount stub cleaner
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in ...
GHSA-4v98-7qmw-rqr8
BuildKit vulnerable to possible host system access from mount stub cleaner
BDU:2024-01029
Уязвимость программного средства сборки контейнеров BuildKit, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю удалить произвольные файлы за пределами контейнера
SUSE-SU-2024:1469-1
Security update for docker
SUSE-SU-2024:0587-1
Security update for docker
SUSE-SU-2024:0586-2
Security update for docker
SUSE-SU-2024:0586-1
Security update for docker
SUSE-SU-2024:3120-1
Security update for buildah, docker
SUSE-SU-2025:03545-1
Security update for docker-stable
SUSE-SU-2025:03540-1
Security update for docker-stable
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature. | CVSS3: 10 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature. | CVSS3: 7.8 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature. | CVSS3: 10 | 2% Низкий | больше 2 лет назад |
 | CVE-2024-23652 BuildKit possible host system access from mount stub cleaner | CVSS3: 9.1 | 2% Низкий | больше 2 лет назад |
| CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in ... | CVSS3: 10 | 2% Низкий | больше 2 лет назад |
| GHSA-4v98-7qmw-rqr8 BuildKit vulnerable to possible host system access from mount stub cleaner | CVSS3: 10 | 2% Низкий | больше 2 лет назад |
 | BDU:2024-01029 Уязвимость программного средства сборки контейнеров BuildKit, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю удалить произвольные файлы за пределами контейнера | CVSS3: 10 | 2% Низкий | больше 2 лет назад |
 | SUSE-SU-2024:1469-1 Security update for docker | больше 2 лет назад | ||
| SUSE-SU-2024:0587-1 Security update for docker | больше 2 лет назад | ||
| SUSE-SU-2024:0586-2 Security update for docker | больше 2 лет назад | ||
| SUSE-SU-2024:0586-1 Security update for docker | больше 2 лет назад | ||
| SUSE-SU-2024:3120-1 Security update for buildah, docker | почти 2 года назад | ||
| SUSE-SU-2025:03545-1 Security update for docker-stable | 10 месяцев назад | ||
| SUSE-SU-2025:03540-1 Security update for docker-stable | 10 месяцев назад |
Уязвимостей на страницу