https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 19:50:27 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-01031 bdu:2024-01031 https://cve.radiocsirt.org/vuln/bdu:2024-01031 https://cve.radiocsirt.org/vuln/bell-cve-2024-23651 <p><strong>Affected:</strong> Alpaquita:23: podman, Alpaquita:stream: docker, Alpaquita:stream: podman</p> <p><strong>Affected:</strong> Alpaquita:23: podman, Alpaquita:stream: docker, Alpaquita:stream: podman</p> https://cve.radiocsirt.org/vuln/bell-cve-2024-23651 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0841 certfr-2024-avi-0841 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0841 https://cve.radiocsirt.org/vuln/cleanstart-2025-mu54155 <p><strong>Affected:</strong> CleanStart: buildkit, CleanStart: buildkitd</p> <p>CVE-2024-23651 affects multiple packages. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. See references for individual vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: buildkit, CleanStart: buildkitd</p> <p>CVE-2024-23651 affects multiple packages. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. See references for individual vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-mu54155 https://cve.radiocsirt.org/vuln/euvd-2026-241769 EUVD-2026-241769 https://cve.radiocsirt.org/vuln/euvd-2026-241769 https://cve.radiocsirt.org/vuln/fkie_cve-2024-23651 <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.</p> <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-23651 https://cve.radiocsirt.org/vuln/ghsa-m3r6-h7wv-7xxv <p><strong>Affected:</strong> Go: github.com/moby/buildkit</p> <p>### Impact Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container.</p> <p>### Patches The issue has been fixed in v0.12.5</p> <p>### Workarounds Avoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with `--mount=type=cache,source=...` options.</p> <p>### References https://www.openwall.com/lists/oss-security/2019/05/28/1</p> <p><strong>Affected:</strong> Go: github.com/moby/buildkit</p> <p>### Impact Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container.</p> <p>### Patches The issue has been fixed in v0.12.5</p> <p>### Workarounds Avoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with `--mount=type=cache,source=...` options.</p> <p>### References https://www.openwall.com/lists/oss-security/2019/05/28/1</p> https://cve.radiocsirt.org/vuln/ghsa-m3r6-h7wv-7xxv https://cve.radiocsirt.org/vuln/gsd-2024-23651 gsd-2024-23651 https://cve.radiocsirt.org/vuln/gsd-2024-23651 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23651 msrc_CVE-2024-23651 https://cve.radiocsirt.org/vuln/msrc_cve-2024-23651 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13651-1 <p>buildkit-0.12.5-1.1 on GA media</p> <p>buildkit-0.12.5-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13651-1 https://cve.radiocsirt.org/vuln/suse-su-2024:0587-1 <p>Security update for docker</p> <p>Security update for docker</p> https://cve.radiocsirt.org/vuln/suse-su-2024:0587-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23651 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:24.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io</p> <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io, Ubuntu:Pro:20.04:LTS: docker.io-app, Ubuntu:22.04:LTS: docker.io-app, Ubuntu:Pro:22.04:LTS: docker.io, Ubuntu:24.04:LTS: docker.io-app, Ubuntu:Pro:24.04:LTS: docker.io</p> <p>BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-23651 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0272 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Docker ausnutzen, um seine Privilegien zu erhöhen, einen Denial-of-Service-Zustand zu verursachen, vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen oder Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0272