Lucene search
WolfiWOLFI:CVE-2024-23652HistoryJun 15, 2024 - 9:08 p.m.
CVE-2024-23652 vulnerabilities
2024-06-1521:08:13
packages.wolfi.dev
242
cve-2024-23652
vulnerabilities
unix
guac
zot
datadog-agent
skaffold
buildkitd
kaniko
docker
conftest
trivy
kubescape
scorecard
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
9.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.7%
Vulnerabilities for packages: conftest, datadog-agent, zot, trivy, guac, kubescape, buildkitd, docker, kaniko, skaffold, scorecard
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Wolfi | unknown | x86_64 | buildkitd | <= 0.12.5-r0 | buildkitd-0.12.5-r0.apk |
| Wolfi | unknown | aarch64 | buildkitd | <= 0.12.5-r0 | buildkitd-0.12.5-r0.apk |
| Wolfi | unknown | x86_64 | conftest | <= 0.49.0-r1 | conftest-0.49.0-r1.apk |
| Wolfi | unknown | aarch64 | conftest | <= 0.49.0-r1 | conftest-0.49.0-r1.apk |
| Wolfi | unknown | x86_64 | datadog-agent | <= 7.50.3-r1 | datadog-agent-7.50.3-r1.apk |
| Wolfi | unknown | aarch64 | datadog-agent | <= 7.50.3-r1 | datadog-agent-7.50.3-r1.apk |
| Wolfi | unknown | x86_64 | docker | <= 25.0.2-r0 | docker-25.0.2-r0.apk |
| Wolfi | unknown | aarch64 | docker | <= 25.0.2-r0 | docker-25.0.2-r0.apk |
| Wolfi | unknown | x86_64 | guac | <= 0.4.0-r1 | guac-0.4.0-r1.apk |
| Wolfi | unknown | aarch64 | guac | <= 0.4.0-r1 | guac-0.4.0-r1.apk |
Related
alpinelinux
alpinelinux
CVE-2024-23652
2024-01-31 22:15:54
nessus
nessus
RHEL 7 : moby_buildkit (Unpatched Vulnerability)
2024-05-11 00:00:00
CBL Mariner 2.0 Security Update: moby-engine (CVE-2024-23652)
2024-03-07 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : docker (SUSE-SU-2024:0586-1)
2024-02-23 00:00:00
osv
osv
Host system modification in github.com/moby/buildkit
2024-02-12 18:45:16
BuildKit vulnerable to possible host system access from mount stub cleaner
2024-01-31 22:43:26
ubuntucve
ubuntucve
CVE-2024-23652
2024-01-31 00:00:00
cbl_mariner
cbl_mariner
cgr
cgr
CVE-2024-23652 vulnerabilities
2024-05-19 03:07:16
cvelist
cvelist
CVE-2024-23652 BuildKit possible host system access from mount stub cleaner
2024-01-31 21:57:42
redhatcve
redhatcve
CVE-2024-23652
2024-02-01 14:33:15
prion
prion
Design/Logic Flaw
2024-01-31 22:15:00
nvd
nvd
CVE-2024-23652
2024-01-31 22:15:54
veracode
veracode
Arbitrary File Deletion
2024-02-01 08:03:49
github
github
BuildKit vulnerable to possible host system access from mount stub cleaner
2024-01-31 22:43:26
cve
cve
CVE-2024-23652
2024-01-31 22:15:54
f5
f5
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:0586-1)
2024-02-23 00:00:00
ibm
ibm
Security Bulletin: Multiple Vulnerabilities in CloudPak for AIOps
2024-02-28 17:30:02
thn
thn
RunC Flaws Enable Container Escapes, Granting Attackers Host Access
2024-01-31 20:00:00
10 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
9.7 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
21.7%
Related for WOLFI:CVE-2024-23652