CVE-2024-23651

Vulnerability updated 7 days ago (2024-11-29T13:50:57.708Z)
Download STIX
Preview STIX
CVE-2024-23651 is a software vulnerability found in Docker BuildKit, which is part of the Moby project and the Open Container Initiative (OCI). This flaw, along with another (CVE-2024-23653), are categorized as build-time only escapes. Specifically, CVE-2024-23651 involves a race condition related to how cache layers are mounted during runtime. The presence of this vulnerability could potentially expose systems to security risks. These vulnerabilities were discovered as part of a broader investigation into Docker-related components, including Moby BuildKit and OCI runc. In response to the discovery, Moby and OCI have released updates for multiple vulnerabilities, including CVE-2024-23651, CVE-2024-23652, CVE-2024-23653, and CVE-2024-21626. These vulnerabilities affect key components of container technology, which underlines their significance. The Cybersecurity & Infrastructure Security Agency (CISA) has urged users and administrators to review the advisories from Moby BuildKit and OCI runc, as well as a blog post by Snyk detailing these vulnerabilities. To mitigate the potential risks associated with these vulnerabilities, it is recommended to apply the necessary updates provided by Moby and OCI. This will ensure that systems using these components are protected from possible security breaches.
Description last updated: 2024-05-04T18:46:44.680Z
What's your take? (Question 1 of 0)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Aliases We are not currently tracking any aliases
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Vulnerabilities
To see the evidence that has resulted in these vulnerability associations, create a free account
Alias DescriptionAssociation TypeVotes
The vulnerability CVE-2024-23653 is associated with CVE-2024-23651. Unspecified
2
Source Document References
Information about the CVE-2024-23651 Vulnerability was read from the documents corpus below. This display is limited to 20 results, create a free account to see more