Поиск уязвимостей
Количество 15
Количество 15
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature.
CVE-2024-23652
BuildKit possible host system access from mount stub cleaner
CVE-2024-23652
BuildKit is a toolkit for converting source code to build artifacts in ...
GHSA-4v98-7qmw-rqr8
BuildKit vulnerable to possible host system access from mount stub cleaner
BDU:2024-01029
Уязвимость программного средства сборки контейнеров BuildKit, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю удалить произвольные файлы за пределами контейнера
SUSE-SU-2024:1469-1
Security update for docker
SUSE-SU-2024:0587-1
Security update for docker
SUSE-SU-2024:0586-2
Security update for docker
SUSE-SU-2024:0586-1
Security update for docker
ALT-PU-2024-18154
ALT-PU-2024-18154: package `buildkit` update to version 0.12.5-alt1
SUSE-SU-2024:3120-1
Security update for buildah, docker
SUSE-SU-2025:03545-1
Security update for docker-stable
SUSE-SU-2025:03540-1
Security update for docker-stable
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature. | CVSS3: 9.1 | 2% Низкий | почти 3 года назад |
 | CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature. | CVSS3: 7.8 | 2% Низкий | почти 3 года назад |
 | CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit frontend or Dockerfile using RUN --mount could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. The issue has been fixed in v0.12.5. Workarounds include avoiding using BuildKit frontends from an untrusted source or building an untrusted Dockerfile containing RUN --mount feature. | CVSS3: 9.1 | 2% Низкий | почти 3 года назад |
 | CVE-2024-23652 BuildKit possible host system access from mount stub cleaner | CVSS3: 9.1 | 2% Низкий | почти 3 года назад |
| CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in ... | CVSS3: 9.1 | 2% Низкий | почти 3 года назад |
| GHSA-4v98-7qmw-rqr8 BuildKit vulnerable to possible host system access from mount stub cleaner | CVSS3: 10 | 2% Низкий | почти 3 года назад |
 | BDU:2024-01029 Уязвимость программного средства сборки контейнеров BuildKit, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю удалить произвольные файлы за пределами контейнера | CVSS3: 10 | 2% Низкий | почти 3 года назад |
 | SUSE-SU-2024:1469-1 Security update for docker | больше 2 лет назад | ||
| SUSE-SU-2024:0587-1 Security update for docker | больше 2 лет назад | ||
| SUSE-SU-2024:0586-2 Security update for docker | больше 2 лет назад | ||
| SUSE-SU-2024:0586-1 Security update for docker | больше 2 лет назад | ||
| ALT-PU-2024-18154 ALT-PU-2024-18154: package `buildkit` update to version 0.12.5-alt1 | CVSS3: 10 | почти 3 года назад | |
| SUSE-SU-2024:3120-1 Security update for buildah, docker | около 2 лет назад | ||
| SUSE-SU-2025:03545-1 Security update for docker-stable | около 1 года назад | ||
| SUSE-SU-2025:03540-1 Security update for docker-stable | около 1 года назад |
Уязвимостей на страницу