GitHub Advisoryadvisory · Go

GHSA-4v98-7qmw-rqr8 BuildKit vulnerable to possible host system access from mount stub cleaner

CRITICAL Published 2024-01-31 Modified 2024-02-01 Official page ↗
Aliases
CVE-2024-23652
Ecosystem
Go
Packages
github.com/moby/buildkit
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
Weaknesses
CWE-22
Reviewed
2024-01-31

Affected packages

• Go github.com/moby/buildkit: < 0.12.5 → fixed in 0.12.5

Description

Impact A malicious BuildKit frontend or Dockerfile using `RUN --mount` could trick the feature that removes empty files created for the mountpoints into removing a file outside the container, from the host system. Patches The issue has been fixed in v0.12.5 Workarounds Avoid using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing `RUN --mount` feature. References

Related

Alias · CVE (1)

  • CVE-2024-23652 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References