Lucene search

[email protected]CVE-2024-24557

HistoryFeb 01, 2024 - 5:15 p.m.

CVE-2024-24557

2024-02-0117:15:10

CWE-346

CWE-345

[email protected]

web.nvd.nist.gov

moby

docker

open-source

cache poisoning

buildkit

/build api

security vulnerability

patch

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.2%

JSON

CPE configuration

Vulners

NVD

mobymobyRange25.0.0–25.0.2

mobymobyRange<24.0.9

CPENameOperatorVersion
mobyproject:mobymobyproject mobylt24.0.9
mobyproject:mobymobyproject mobylt25.0.2

CPE	Name	Operator	Version
mobyproject:moby	mobyproject moby	lt	24.0.9
mobyproject:moby	mobyproject moby	lt	25.0.2

CNA Affected

[
  {
    "vendor": "moby",
    "product": "moby",
    "versions": [
      {
        "version": ">= 25.0.0, < 25.0.2",
        "status": "affected"
      },
      {
        "version": " < 24.0.9",
        "status": "affected"
      }
    ]
  }
]

References

github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae

github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc

Social References