20 matches found
CVE-2026-93323
A flaw was found in BuildKit. A local user with build permissions can trigger a Denial of Service DoS by submitting a build context containing an oversized Dockerfile or .dockerignore file. Because the Dockerfile frontend loads these files directly into memory without enforcing a size limit, an...
CVE-2026-93323
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...
UBUNTU-CVE-2026-93323
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...
CVE-2026-93323 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...
CVE-2026-93323
The Dockerfile frontend is vulnerable to a memory exhaustion attack because it loads Dockerfile and .dockerignore files into memory without a size limit. An attacker providing a build context with an oversized file can cause buildkitd to allocate proportional memory, potentially leading to a Deni...
CVE-2026-93323 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...
CVE-2026-93323 Oversized Dockerfile or .dockerignore can exhaust buildkitd memory
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...
CVE-2026-93323: Memory Allocation with Excessive Size Value
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...
PT-2026-103871
Name of the Vulnerable Software and Affected Versions Docker BuildKit affected versions not specified Description The Dockerfile frontend loads the Dockerfile and .dockerignore files of a build context into memory without a size limit. An oversized file within the build context can cause buildkit...
Flickr: Information Disclosure: .dockerignore file is publicly accessible
Vulnerability description not provided...
podman: Symlink error leads to information disclosure
A vulnerability was found in buildah and podman. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
podman: Symlink error leads to information disclosure
A vulnerability was found in buildah and podman. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
SUSE CVE-2022-4122
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
DEBIAN-CVE-2022-4122
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
UBUNTU-CVE-2022-4122
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
CVE-2022-4122
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
CVE-2022-4122: Improper Link Resolution Before File Access
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
CVE-2022-4122
A vulnerability was found in buildah. Incorrect following of symlinks while reading .containerignore and .dockerignore results in information disclosure...
PT-2022-25736 · Buildah +3 · Buildah +3
Name of the Vulnerable Software and Affected Versions: buildah affected versions not specified Description: A vulnerability was found in buildah, where incorrect following of symlinks while reading .containerignore and .dockerignore files results in information disclosure. This issue affects...
Important: container-tools:rhel8 security and bug fix update
The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc. Security Fixes: QEMU: Slirp: potential OOB access due to unsafe snprintf usages CVE-2020-8608 For more details about the security issues, including the impact, a CVSS score,...