Path Traversal in Moby builder

util/binfmtmisc/check.go in Builder in Docker Engine before 19.03.9 calls os.OpenFile with a potentially unsafe qemu-check temporary pathname, constructed with an empty first argument in an ioutil.TempDir call...

GHSA-XR7R-F8XQ-VFVV runc vulnerable to container breakout through process.cwd trickery and leaked fds

Impact In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process from runc exec to have a working directory in the host filesystem namespace, allowing for a container escape by giving access to the host filesystem "attack 2". Th...

GHSA-M3R6-H7WV-7XXV vulnerabilities

Vulnerabilities for packages: docker, guac, buildkitd, zot, kubescape, skaffold, scorecard, trivy, conftest, kaniko...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: docker, guac, buildkitd, zot, kubescape, skaffold, scorecard, trivy, conftest, kaniko...

GHSA-4V98-7QMW-RQR8 vulnerabilities

Vulnerabilities for packages: scorecard, kaniko, zot, skaffold, buildkitd, conftest-fips, kubescape, docker, guac, conftest, trivy...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: docker, guac, buildkitd, zot, kubescape, skaffold, scorecard, trivy, conftest, kaniko...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: docker, guac, buildkitd, zot, kubescape, skaffold, scorecard, trivy, conftest, kaniko...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: docker, guac, buildkitd, zot, kubescape, skaffold, scorecard, trivy, conftest, kaniko...

CVE-2024-23651 vulnerabilities

Vulnerabilities for packages: scorecard, kaniko, zot, skaffold, buildkitd, conftest-fips, kubescape, docker, guac, conftest, trivy...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: scorecard, kaniko, zot, skaffold, buildkitd, conftest-fips, kubescape, docker, guac, conftest, trivy...

CVE-2024-23653 vulnerabilities

Vulnerabilities for packages: scorecard, kaniko, zot, skaffold, buildkitd, conftest-fips, kubescape, docker, guac, conftest, trivy...

AZL-35433 CVE-2024-23653 affecting package docker-buildx for versions less than 0.14.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

AZL-35439 CVE-2024-23653 affecting package docker-compose for versions less than 2.27.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as build steps, BuildKit also provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask...

AZL-35432 CVE-2024-23650 affecting package docker-buildx for versions less than 0.14.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: docker, guac, buildkitd, zot, kubescape, skaffold, scorecard, trivy, conftest, kaniko...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: nerdctl, runc, skopeo, skaffold, kots, cadvisor, wolfictl, newrelic-infrastructure-agent, k3s, kubernetes, ctop, k9s, trivy, zarf, docker, buildkitd, kubescape, podman, zot, grype, syft, k3d, kaniko...

CVE-2024-23650 vulnerabilities

Vulnerabilities for packages: scorecard, kaniko, zot, skaffold, buildkitd, conftest-fips, kubescape, docker, guac, conftest, trivy...

CVE-2024-21626 vulnerabilities

Vulnerabilities for packages: k9s, cadvisor, syft, skaffold, podman, k3s, kubescape, grype, zot, zarf, kubernetes, newrelic-infrastructure-agent, wolfictl, k3d, ctop, skopeo, nerdctl, kots, runc, kaniko, docker, buildkitd, trivy...

AZL-35438 CVE-2024-23650 affecting package docker-compose for versions less than 2.27.0-1

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoi...

RunC Flaws Enable Container Escapes, Granting Attackers Host Access

Multiple security vulnerabilities have been disclosed in the runC command line tool that could be exploited by threat actors to escape the bounds of the container and stage follow-on attacks. The vulnerabilities, tracked as CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653, have...