PT-2024-20002 · Buildkit+5 · Buildkit+5

Cpuguy83 · Publicado 2024-01-31 · Atualizado 2026-05-18 · CVE-2024-23650

Positive Technologies (AI Summary) · Pt

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Nome do software vulnerável e versões afetadas

Versões do BuildKit anteriores à 0.12.5

Descrição

Um cliente ou front-end malicioso do BuildKit poderia criar uma solicitação capaz de provocar a falha do daemon do BuildKit com um erro de pânico. O problema está relacionado à conversão do código-fonte em artefatos de compilação. Como solução alternativa, evite usar front-ends do BuildKit provenientes de fontes não confiáveis.

Recomendações

Para versões anteriores à 0.12.5, atualize para a versão 0.12.5 para resolver o problema.

Como solução temporária, considere evitar o uso de front-ends do BuildKit provenientes de fontes não confiáveis até que o problema seja resolvido.

Exploit

Correção

Improper Check for Exceptional Conditions

Enumeração de Fraquezas

CWE-754

Identificadores relacionados

ALSA-2025_16880

AZL-34080

AZL-34083

AZL-35003

AZL-35432

AZL-35438

CESA-2024_2988

CLEANSTART-2026-BK59402

CLEANSTART-2026-BN11148

CLEANSTART-2026-GY69323

CLEANSTART-2026-HI89495

CLEANSTART-2026-HL71566

CLEANSTART-2026-JD48541

CLEANSTART-2026-OS18490

CLEANSTART-2026-SB85645

CLEANSTART-2026-SP51034

CLEANSTART-2026-TD34476

CLEANSTART-2026-XL45869

CLEANSTART-2026-YB44027

CLEANSTART-2026-ZM20570

CVE-2024-23650

GHSA-9P26-698R-W4HX

GO-2024-2492

INFSA-2024_2988

OPENSUSE-SU-2024:14059-1

OPENSUSE-SU-2024:14598-1

OPENSUSE-SU-2025_0226-1

RHSA-2024:2988

RHSA-2024_2988

SUSE-SU-2025:0226-1

SUSE-SU-2025:03540-1

SUSE-SU-2025:03545-1

SUSE-SU-2025:1062-1

SUSE-SU-2025:1102-1

SUSE-SU-2025_0226-1

SUSE-SU-2026:0972-1

SUSE-SU-2026:1118-1

Produtos afetados

Astra Linux

Buildkit

Centos

Red Hat

Rocky Linux

Suse

Referências · 399

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/23xxx/CVE-2024-23650.json · Exploit
• https://github.com/moby/buildkit/pull/4601 · Aviso do Fabricante
• https://github.com/moby/buildkit/security/advisories/GHSA-9p26-698r-w4hx · Aviso do Fabricante
• https://github.com/moby/buildkit/releases/tag/v0.12.5 · Correção
• https://github.com/moby/buildkit · Nota
• https://github.com/moby/buildkit/commit/7718bd5c3dc8fc5cd246a30cc41766e7a53c043c · Nota
• https://github.com/moby/buildkit/commit/e1924dc32da35bfb0bfdbb9d0fc7bca25e552330 · Nota
• https://github.com/moby/buildkit/commit/481d9c45f473c58537f39694a38d7995cc656987 · Nota
• https://github.com/moby/buildkit/commit/83edaef59d545b93e2750f1f85675a3764593fee · Nota
• https://github.com/moby/buildkit/commit/96663dd35bf3787d7efb1ee7fd9ac7fe533582ae · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BN11148.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BN11148 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SB85645.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-TD34476.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JD48541 · Nota