Alpine Linux Development TeamALPINE:CVE-2024-23650CVE-2024-23650
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.6%
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | buildkit | < 0.12.5-r0 | UNKNOWN |
| Alpine | edge-community | noarch | docker | < 25.0.2-r0 | UNKNOWN |
| Alpine | edge-community | noarch | singularity | < 4.1.1-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | docker | < 25.0.2-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | buildkit | < 0.12.5-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | docker | < 25.0.2-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | singularity | < 4.1.1-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | buildkit | < 0.12.5-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | docker | < 25.0.2-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | singularity | < 4.1.1-r0 | UNKNOWN |
Related
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
20.6%