CVE-2024-23650mediumCWE-754

CVE-2024-23650: medium-severity vulnerability in moby buildkit

BuildKit possible panic when incorrect parameters sent from frontend

Published · Updated

Follow this CVE+ Monitor BuildKit+ Monitor docker

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 1.1%
In short

A malicious BuildKit client can send specially crafted requests that crash the BuildKit daemon, causing a denial of service. This vulnerability affects systems that use BuildKit with untrusted frontends.

Technical detail

BuildKit daemon crashes due to improper error handling (CWE-754) when receiving malformed parameters from a frontend client. An attacker with the ability to interact with the BuildKit API can trigger an unhandled panic condition, resulting in denial of service. Requires network or local access to the BuildKit daemon.

Summary generated and translated by AI from the official description.
BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
moby · buildkit
Related CVEs — moby buildkit

In the same product, most dangerous first.

CVE-2024-23653CRITICALBuildKit interactive containers API does not validate entitlements checkEPSS 4.1%CVE-2024-23652CRITICALBuildKit possible host system access from mount stub cleanerEPSS 2.5%CVE-2023-26054MEDIUMCredentials inlined to Git URLs could end up in provenance attestation in BuildKitEPSS 1.0%CVE-2024-23651HIGHBuildKit possible race condition with accessing subpaths from cache mountsEPSS 0.9%CVE-2026-75593HIGHBuildKit: Malicious client can bypass destination directory validation on local sources uploadEPSS 0.5%CVE-2026-33747HIGHBuildKit vulnerable to malicious frontend causing file escape outside of storage rootEPSS 0.5%