Database/Container, Kubernetes & orchestration
Docker / moby: Classic builder cache poisoning for images built FROM scratch
CVSS 6.9CVE-2024-24557Container, Kubernetes & orchestrationcurated
Impact
Classic builder cache poisoning for images built FROM scratch
Who can reach it
Anyone sharing a build cache, e.g. a multi-tenant CI builder
What to do
Upgrade moby; give each tenant an isolated build cache
References
Related entries
- Docker / moby: With --userns-remap, remapped root can escalate to real host rootCVE-2021-21284 · Docker / mobyMedium
- Docker / moby: Encrypted overlay network traffic can be unencrypted due to missing rulesCVE-2023-28841 · Docker / mobyMedium
- Docker / moby: Unauthenticated injection of traffic into an encrypted overlay networkCVE-2023-28842 · Docker / mobyMedium
- Docker / moby: Malformed image manifest crashes dockerdCVE-2021-21285 · Docker / mobyMedium
- Docker / moby: NULL pointer dereference in image_history crashes the daemonCVE-2024-36620 · Docker / mobyMedium
- Docker / moby: Race in the buildkit snapshot adapterCVE-2024-36621 · Docker / mobyMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.