CVE-2024-23650CWE-754

BuildKit possible panic when incorrect parameters sent from frontend

Medium · published January 31, 2024

CVSS v3.1
5.3
EPSS
1%
Percentile
66.4
In the wild
Unconfirmed
What it is

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic. The issue has been fixed in v0.12.5. As a workaround, avoid using BuildKit frontends from untrusted sources.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.01140 · 66.4th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2024-01-31T21:42Z
EPSS history
Timeline
  • 31 JAN 21:42Z
    BuildKit possible panic when incorrect parameters sent from frontend
    cvelistv5