CVE-2024-23650
EUVD-2024-031531.01.2024, 22:15
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mobyproject | buildkit | 𝑥 < 0.12.5 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| moby | buildkit | 𝑥 < 0.12.5 | ADP |
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| docker.io |
| ||||||||||||||||||||
| docker.io-app |
|
Amazon Linux Releases
Azure Linux Releases
Common Weakness Enumeration
References