GHSA-M3R6-H7WV-7XXV vulnerabilities

Vulnerabilities for packages: scorecard, buildkitd, skaffold, conftest, kubescape, trivy, zot, kaniko, docker, guac...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: skaffold, zot, scorecard, conftest-fips, guac, conftest, kaniko, trivy, docker, kubescape, buildkitd...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: scorecard, buildkitd, skaffold, conftest, kubescape, trivy, zot, kaniko, docker, guac...

AZL-35439 CVE-2024-23653 affecting package docker-compose for versions less than 2.27.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: skaffold, zot, scorecard, conftest-fips, guac, conftest, kaniko, trivy, docker, kubescape, buildkitd...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: skaffold, zot, scorecard, conftest-fips, guac, conftest, kaniko, trivy, docker, kubescape, buildkitd...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: scorecard, buildkitd, skaffold, conftest, kubescape, trivy, zot, kaniko, docker, guac...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: scorecard, buildkitd, skaffold, conftest, kubescape, trivy, zot, kaniko, docker, guac...

AZL-35433 CVE-2024-23653 affecting package docker-buildx for versions less than 0.14.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: skaffold, zot, scorecard, conftest-fips, guac, conftest, kaniko, trivy, docker, kubescape, buildkitd...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: scorecard, buildkitd, skaffold, conftest, kubescape, trivy, zot, kaniko, docker, guac...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: skaffold, zot, scorecard, conftest-fips, guac, conftest, kaniko, trivy, docker, kubescape, buildkitd...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: scorecard, buildkitd, skaffold, conftest, kubescape, trivy, zot, kaniko, docker, guac...

AZL-35438 CVE-2024-23650 affecting package docker-compose for versions less than 2.27.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

AZL-35432 CVE-2024-23650 affecting package docker-buildx for versions less than 0.14.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: buildkitd, nerdctl, k3s, kubescape, trivy, docker, cadvisor, wolfictl, zarf, kaniko, k9s, podman, skaffold, newrelic-infrastructure-agent, syft, zot, skopeo, runc, grype, k3d, kots, kubernetes, ctop...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: zot, syft, docker, kubescape, buildkitd, podman, kubernetes, nerdctl, skaffold, k3s, cadvisor, kaniko, runc, wolfictl, skopeo, newrelic-infrastructure-agent, k9s, kots, grype, ctop, k3d, zarf, trivy...

RunC Flaws Enable Container Escapes, Granting Attackers Host Access

Multiple security vulnerabilities have been disclosed in the runC command line tool that could be exploited by threat actors to escape the bounds of the container and stage follow-on attacks. The vulnerabilities, tracked as CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653, have...

@lobehub/chat vulnerable to unauthorized access to plugins

Description: When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. Proof-of-Concept: Let’s suppose that application has been deployed with following command: sudo docker run -d -p 3210:3210 -...

runc (docker) File Descriptor Leak Privilege Escalation

All versions of runc use exploit/linux/local/runc/cwdprivesc msf undefinedcwdprivesc show actions ...actions... msf undefinedcwdprivesc set ACTION msf undefinedcwdprivesc show options ...show and set options... msf undefinedcwdprivesc run This module requires Metasploit:...