Каталог CVE

CVE-2024-23651

Docker vulnerabilities

[Каталог CVE]

BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to files from the host system being accessible to the build container. The issue has been fixed in v0.12.5. Workarounds include, avoiding using BuildKit frontend from an untrusted source or building an untrusted Dockerfile containing cache mounts with --mount=type=cache,source=... options.

Критичність
High · CVSS 7.5CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.91% · Oct 27, 2026

Projects and upstream resources

Reported versions and fixes

Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.

Distribution / releasePackageVersionStatusSource
Opensusetumbleweedbuildkit0.12.5-1.1UnknownSource applicability is not established[OPENSUSE-SU-2024:13651-1]
Opensusetumbleweeddocker24.0.7_ce-3.1UnknownSource applicability is not established[OPENSUSE-SU-2024:13689-1]
Ubuntuprodocker.io20.10.24+dfsg1-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io20.10.25+dfsg1-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io20.10.25+dfsg1-2ubuntu1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io20.10.25+dfsg1-2ubuntu1+esm2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app20.10.25-0ubuntu1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app20.10.25-0ubuntu1~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app24.0.5-0ubuntu1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app24.0.7-0ubuntu2~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app26.1.3-0ubuntu1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app26.1.3-0ubuntu1~20.04.1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]

Showing 12 observations. All 55 observations, including unknown and conflicting reports, are available below.

Provider details and historical evidence
Distribution / releasePackageVersionStatusSource
UnknownRelease not reporteddocker.io20.10.25+dfsg1-2ubuntu1+esm2UnknownSource applicability is not establishedProvider not reported
UnknownRelease not reportedgolang-github-docker-docker-dev20.10.25+dfsg1-2ubuntu1+esm2UnknownSource applicability is not establishedProvider not reported
Opensuseleap 15.5docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Opensuseleap micro 5.3docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Opensuseleap micro 5.4docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Opensusetumbleweedbuildkit0.12.5-1.1UnknownSource applicability is not established[OPENSUSE-SU-2024:13651-1]
Opensusetumbleweeddocker24.0.7_ce-3.1UnknownSource applicability is not established[OPENSUSE-SU-2024:13689-1]
Suseenterprise storage 7.1docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise high performance computing 15 sp2-ltssdocker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise high performance computing 15 sp3-ltssdocker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise high performance computing 15 sp4-esposdocker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise high performance computing 15 sp4-ltssdocker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise micro 5.1docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise micro 5.2docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise micro 5.3docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise micro 5.4docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise micro 5.5docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise module for containers 12docker24.0.7_ce-98.106.1UnknownSource applicability is not established[SUSE-SU-2024:0587-1]
Suselinux enterprise module for containers 12docker25.0.5_ce-98.112.1UnknownSource applicability is not established[SUSE-SU-2024:1469-1]
Suselinux enterprise module for containers 15 sp4docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1][SUSE-SU-2024:0586-2]
Suselinux enterprise module for containers 15 sp5docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise server 15 sp2-ltssdocker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise server 15 sp3-ltssdocker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise server 15 sp4-ltssdocker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise server for sap applications 15 sp2docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise server for sap applications 15 sp3docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux enterprise server for sap applications 15 sp4docker24.0.7_ce-150000.193.1UnknownSource applicability is not established[SUSE-SU-2024:0586-1]
Suselinux micro 6.0buildkit0.12.5-1.1UnknownSource applicability is not established[SUSE-SU-2025:20107-1]
Suselinux micro 6.0docker25.0.6_ce-1.1UnknownSource applicability is not established[SUSE-SU-2025:20056-1]
Ubuntu22.04docker.io-app20.10.25-0ubuntu1~22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu22.04docker.io-app20.10.25-0ubuntu1~22.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu22.04docker.io-app24.0.5-0ubuntu1~22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu22.04docker.io-app24.0.7-0ubuntu2~22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu22.04docker.io-app26.1.3-0ubuntu1~22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu22.04docker.io-app27.5.1-0ubuntu3~22.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu22.04docker.io-app27.5.1-0ubuntu3~22.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app24.0.5-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app24.0.7-0ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app24.0.7-0ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app24.0.7-0ubuntu3UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app24.0.7-0ubuntu4UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app24.0.7-0ubuntu4.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app26.1.3-0ubuntu1~24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app27.5.1-0ubuntu3~24.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntu24.04docker.io-app27.5.1-0ubuntu3~24.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io20.10.24+dfsg1-1ubuntu2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io20.10.25+dfsg1-2ubuntu1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io20.10.25+dfsg1-2ubuntu1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io20.10.25+dfsg1-2ubuntu1+esm2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app20.10.25-0ubuntu1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app20.10.25-0ubuntu1~20.04.2UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app24.0.5-0ubuntu1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app24.0.7-0ubuntu2~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app26.1.3-0ubuntu1~20.04.1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Ubuntuprodocker.io-app26.1.3-0ubuntu1~20.04.1+esm1UnknownSource applicability is not established[UBUNTU-CVE-2024-23651]
Original provider fields
{
  "package_releases": [],
  "fixed_versions": [],
  "distribution_packages": [
    {
      "name": "docker.io",
      "fixed_version": "20.10.25+dfsg1-2ubuntu1+esm2",
      "applicability_unknown": true
    },
    {
      "name": "golang-github-docker-docker-dev",
      "fixed_version": "20.10.25+dfsg1-2ubuntu1+esm2",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "25.0.6_ce-1.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:20056-1",
      "fixed_version": "25.0.6_ce-1.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:20056-1",
      "provider_updated_at": "2026-03-23T04:48:50.980159Z",
      "applicability_unknown": true
    },
    {
      "name": "buildkit",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.5-1.1"
            }
          ]
        }
      ],
      "release": "linux micro 6.0",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2025:20107-1",
      "fixed_version": "0.12.5-1.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2025:20107-1",
      "provider_updated_at": "2026-03-23T04:48:10.800357Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-3.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:13689-1",
      "fixed_version": "24.0.7_ce-3.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:13689-1",
      "provider_updated_at": "2026-02-04T04:15:12.803326Z",
      "applicability_unknown": true
    },
    {
      "name": "buildkit",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.12.5-1.1"
            }
          ]
        }
      ],
      "release": "tumbleweed",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/openSUSE-SU-2024:13651-1",
      "fixed_version": "0.12.5-1.1",
      "provider_source": "pypi",
      "provider_record_id": "OPENSUSE-SU-2024:13651-1",
      "provider_updated_at": "2026-02-04T03:48:44.419139Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-98.106.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for containers 12",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0587-1",
      "fixed_version": "24.0.7_ce-98.106.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0587-1",
      "provider_updated_at": "2026-02-04T03:41:28.479593Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for containers 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for containers 15 sp5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-espos",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise high performance computing 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp2-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp3-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server 15 sp4-ltss",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise server for sap applications 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise micro 5.2",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "enterprise storage 7.1",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "leap micro 5.3",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "leap micro 5.4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "opensuse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "leap 15.5",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-1",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-1",
      "provider_updated_at": "2026-02-04T03:29:47.784315Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "25.0.5_ce-98.112.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for containers 12",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:1469-1",
      "fixed_version": "25.0.5_ce-98.112.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:1469-1",
      "provider_updated_at": "2026-02-04T03:23:15.374340Z",
      "applicability_unknown": true
    },
    {
      "name": "docker",
      "distro": "suse",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "24.0.7_ce-150000.193.1"
            }
          ]
        }
      ],
      "release": "linux enterprise module for containers 15 sp4",
      "versions": [],
      "ecosystem": "rpm",
      "provider_url": "https://osv.dev/vulnerability/SUSE-SU-2024:0586-2",
      "fixed_version": "24.0.7_ce-150000.193.1",
      "provider_source": "pypi",
      "provider_record_id": "SUSE-SU-2024:0586-2",
      "provider_updated_at": "2026-02-04T03:19:16.536496Z",
      "applicability_unknown": true
    },
    {
      "name": "docker.io",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "20.10.25+dfsg1-2ubuntu1+esm2"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "20.10.24+dfsg1-1ubuntu2",
        "20.10.25+dfsg1-2ubuntu1",
        "20.10.25+dfsg1-2ubuntu1+esm1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-23651",
      "fixed_version": "20.10.25+dfsg1-2ubuntu1+esm2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-23651",
      "provider_updated_at": "2026-02-04T02:54:46.008812Z",
      "applicability_unknown": true
    },
    {
      "name": "docker.io-app",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "26.1.3-0ubuntu1~20.04.1+esm1"
            }
          ]
        }
      ],
      "release": "pro",
      "versions": [
        "20.10.25-0ubuntu1~20.04.1",
        "20.10.25-0ubuntu1~20.04.2",
        "24.0.5-0ubuntu1~20.04.1",
        "24.0.7-0ubuntu2~20.04.1",
        "26.1.3-0ubuntu1~20.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-23651",
      "fixed_version": "26.1.3-0ubuntu1~20.04.1+esm1",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-23651",
      "provider_updated_at": "2026-02-04T02:54:46.008812Z",
      "applicability_unknown": true
    },
    {
      "name": "docker.io-app",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "27.5.1-0ubuntu3~22.04.2"
            }
          ]
        }
      ],
      "release": "22.04",
      "versions": [
        "20.10.25-0ubuntu1~22.04.1",
        "20.10.25-0ubuntu1~22.04.2",
        "24.0.5-0ubuntu1~22.04.1",
        "24.0.7-0ubuntu2~22.04.1",
        "26.1.3-0ubuntu1~22.04.1",
        "27.5.1-0ubuntu3~22.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-23651",
      "fixed_version": "27.5.1-0ubuntu3~22.04.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-23651",
      "provider_updated_at": "2026-02-04T02:54:46.008812Z",
      "applicability_unknown": true
    },
    {
      "name": "docker.io-app",
      "distro": "ubuntu",
      "ranges": [
        {
          "type": "ECOSYSTEM",
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "27.5.1-0ubuntu3~24.04.2"
            }
          ]
        }
      ],
      "release": "24.04",
      "versions": [
        "24.0.5-0ubuntu1",
        "24.0.7-0ubuntu1",
        "24.0.7-0ubuntu2",
        "24.0.7-0ubuntu3",
        "24.0.7-0ubuntu4",
        "24.0.7-0ubuntu4.1",
        "26.1.3-0ubuntu1~24.04.1",
        "27.5.1-0ubuntu3~24.04.1"
      ],
      "ecosystem": "deb",
      "provider_url": "https://osv.dev/vulnerability/UBUNTU-CVE-2024-23651",
      "fixed_version": "27.5.1-0ubuntu3~24.04.2",
      "provider_source": "pypi",
      "provider_record_id": "UBUNTU-CVE-2024-23651",
      "provider_updated_at": "2026-02-04T02:54:46.008812Z",
      "applicability_unknown": true
    }
  ]
}

OpenFactory catalog packages

Зіставлення пакетів триває.

[openSUSE Tumbleweed]

  • [buildkit]Невідомо

    Пакет джерела: [buildkit]

    Подробиці (1)

    • 0.32.2-1.1 · x86_64 · tumbleweed

      Виправлена · Виправлена: 0.12.5-1.1

      usn · buildkit · opensuse · tumbleweed

  • [docker]Невідомо

    Пакет джерела: [docker]

    Подробиці (1)

    • 29.4.0_ce-40.3 · x86_64 · tumbleweed

      Виправлена · Виправлена: 24.0.7_ce-3.1

      usn · docker · opensuse · tumbleweed

  • [docker-bash-completion]Невідомо

    Пакет джерела: [docker]

    Подробиці (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Невідомо · Виправлена: 24.0.7_ce-3.1

      Version impact unknown

      usn · docker · opensuse · tumbleweed

  • [docker-buildx]Невідомо

    Пакет джерела: [docker]

    Подробиці (1)

    • 0.33.0-40.3 · x86_64 · tumbleweed

      Невідомо · Виправлена: 24.0.7_ce-3.1

      Version impact unknown

      usn · docker · opensuse · tumbleweed

  • [docker-fish-completion]Невідомо

    Пакет джерела: [docker]

    Подробиці (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Невідомо · Виправлена: 24.0.7_ce-3.1

      Version impact unknown

      usn · docker · opensuse · tumbleweed

  • [docker-rootless-extras]Невідомо

    Пакет джерела: [docker]

    Подробиці (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Невідомо · Виправлена: 24.0.7_ce-3.1

      Version impact unknown

      usn · docker · opensuse · tumbleweed

  • [docker-zsh-completion]Невідомо

    Пакет джерела: [docker]

    Подробиці (1)

    • 29.4.0_ce-40.3 · noarch · tumbleweed

      Невідомо · Виправлена: 24.0.7_ce-3.1

      Version impact unknown

      usn · docker · opensuse · tumbleweed

Спостережено:

Посилання

[CERT-Bund public advisories] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]