CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
29.9%
In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special security.insecure
entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request.
The issue has been fixed in v0.12.5 .
Avoid using BuildKit frontends from untrusted sources. A frontend image is usually specified as the #syntax
line on your Dockerfile, or with --frontend
flag when using buildctl build
command.
github.com/moby/buildkit
github.com/moby/buildkit/commit/5026d95aa3336e97cfe46e3764f52d08bac7a10e
github.com/moby/buildkit/commit/92cc595cfb12891d4b3ae476e067c74250e4b71e
github.com/moby/buildkit/pull/4602
github.com/moby/buildkit/releases/tag/v0.12.5
github.com/moby/buildkit/security/advisories/GHSA-wr6v-9f75-vh2g
nvd.nist.gov/vuln/detail/CVE-2024-23653
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
29.9%