CVE-2024-23650
BuildKit possible panic when incorrect parameters sent from frontend
Résumé
BuildKit possible panic when incorrect parameters sent from frontend
Description d'origine
La description telle que publiée par la source (souvent en anglais).
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com