Lucene search

K
prionPRIOn knowledge basePRION:CVE-2024-23650
HistoryJan 31, 2024 - 10:15 p.m.

Design/Logic Flaw

2024-01-3122:15:00
PRIOn knowledge base
www.prio-n.com
6
logic flaw
source code
build artifacts
malicious request
buildkit daemon
crash
security fix
untrusted sources
frontend vulnerabilities

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

CPENameOperatorVersion
buildkitlt0.12.5

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

20.6%