CVE-2024-24041

creationtimestamp| type| source ---|---|--- 2024-02-01 22:06:50+00:00| seen| https://t.me/ctinow/177792 2024-02-07 21:17:08+00:00| seen| https://t.me/ctinow/180965 2024-02-24 10:41:43+00:00| seen| https://t.me/ctinow/192526...

CVE-2024-24569

creationtimestamp| type| source ---|---|--- 2024-02-01 20:31:25+00:00| seen| https://t.me/ctinow/177769 2024-02-09 23:16:32+00:00| seen| https://t.me/ctinow/182320 2024-02-24 11:16:53+00:00| seen| https://t.me/ctinow/192537...

CVE-2024-0406

creationtimestamp| type| source ---|---|--- 2024-02-01 19:01:53+00:00| seen| https://t.me/ctinow/177740 2025-01-14 14:03:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lfpg4tm6kb2j 2025-01-14 14:34:04+00:00| seen|...

CVE-2024-23653

A vulnerability was found in the Moby Builder Toolkit, specifically in the Interactive Containers API, where entitlement checks are not adequately validated, caused by a missing privilege check in a GRPC endpoint when called using a custom syntax format. This flaw allows the currently running...

CVE-2024-23651

A race condition issue was found in the Moby Builder Toolkit, stemming from a time-of-check/time-of-use TOCTOU vulnerability during cache volume mounting at container build time. Concurrent execution of two malicious build steps, sharing the same cache mounts with subpaths, may result in files fr...

CVE-2024-21750

creationtimestamp| type| source ---|---|--- 2024-02-01 11:31:18+00:00| seen| https://t.me/ctinow/177488 2024-02-03 17:21:16+00:00| seen| https://t.me/ctinow/178611...

CVE-2020-3259

creationtimestamp| type| source ---|---|--- 2024-02-01 05:05:39+00:00| published-proof-of-concept| https://t.me/cKure/12265 2024-02-06 23:42:56+00:00| published-proof-of-concept| Telegram/rjeZfv8p0tcHN7J2DWpb9zLqc-BQ51XmPYnMojlP-Kw 2024-02-07 13:32:05+00:00| published-proof-of-concept|...

CVE-2024-24571

creationtimestamp| type| source ---|---|--- 2024-02-01 00:21:35+00:00| seen| https://t.me/ctinow/177212 2024-02-07 21:17:10+00:00| seen| https://t.me/ctinow/180966 2024-02-22 21:21:46+00:00| seen| https://t.me/ctinow/191178...

CVE-2024-23650

creationtimestamp| type| source ---|---|--- 2024-01-31 23:26:20+00:00| seen| https://t.me/ctinow/177173 2024-02-01 17:01:29+00:00| seen| https://t.me/ctinow/177671...

Buildkit's interactive containers API does not validate entitlements check

Impact In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if specia...

Design/Logic Flaw

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-23650

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-23653 BuildKit interactive containers API does not validate entitlements check

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

CVE-2024-23653

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

CVE-2024-23650 BuildKit possible panic when incorrect parameters sent from frontend

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-23650 BuildKit possible panic when incorrect parameters sent from frontend

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-23650

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-0853

creationtimestamp| type| source ---|---|--- 2024-01-31 17:17:11+00:00| seen| https://t.me/ctinow/176897 2024-02-01 01:01:38+00:00| seen| https://t.me/ctinow/177232 2024-02-03 15:31:50+00:00| seen| https://t.me/ctinow/178586 2024-02-13 03:16:25+00:00| seen| https://t.me/ctinow/183579 2024-02-22...

CVE-2024-1103

creationtimestamp| type| source ---|---|--- 2024-01-31 16:21:57+00:00| seen| https://t.me/ctinow/176856 2024-02-05 23:16:08+00:00| seen| https://t.me/ctinow/179576 2024-02-22 13:42:23+00:00| seen| https://t.me/ctinow/190724...

CVE-2024-1098

creationtimestamp| type| source ---|---|--- 2024-01-31 13:32:20+00:00| seen| https://t.me/ctinow/176715 2024-02-05 23:16:10+00:00| seen| https://t.me/ctinow/179578 2024-02-22 13:12:27+00:00| seen| https://t.me/ctinow/190698...