6.8
Moyenne
CVE-2026-93323 The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size…
Description
The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which interrupts other builds on the same instance. Fixed by rejecting such files above 16 MiB.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| buildkit 0.33 | premières → 0.33.0 | Pas de correctif indiqué |
Références
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de buildkit
Les 27 CVE de buildkit →
CVE-2026-121520
Malicious client could set xattr value outside of BuildKit state directory
4.5
Moyenne
CVE-2026-121522
Possible panic from Git source resolver
6.7
Moyenne
CVE-2026-93321
A malicious frontend can submit an LLB definition that causes buildkitd to panic and terminate, interrupting all…
6.9
Moyenne
CVE-2026-93315
When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup
5.8
Moyenne