Most recent entries from all

BELL-CVE-2024-23650

Affected: Alpaquita:stream: docker

certfr-2024-avi-0646 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan…

certfr-2024-avi-0646

CLEANSTART-2025-ZX96754 — BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner

Affected: CleanStart: buildkit, CleanStart: buildkitd

CVE-2024-23650 affects multiple packages. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. See references for individual vulnerability details.

cnvd-2024-09642

EUVD-2026-200882

fkie_cve-2024-23650

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

GHSA-9p26-698r-w4hx — BuildKit vulnerable to possible panic when incorrect parameters sent from frontend

Affected: Go: github.com/moby/buildkit

### Impact A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

### Patches The issue has been fixed in v0.12.5

### Workarounds Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the `#syntax` line on your Dockerfile, or with `--frontend` flag when using `buildctl build` command.

### References

gsd-2024-23650

msrc_CVE-2024-23650 — BuildKit possible panic when incorrect parameters sent from frontend

msrc_CVE-2024-23650

openSUSE-SU-2024:14059-1 — singularity-ce-4.1.3-1.1 on GA media

singularity-ce-4.1.3-1.1 on GA media

SUSE-SU-2025:0226-1 — Security update for docker-stable

Security update for docker-stable

UBUNTU-CVE-2024-23650

Affected: Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:24.04:LTS: docker.io-app

WID-SEC-W-2024-0272 — docker: Mehrere Schwachstellen

Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.