{"id":"EUVD-2026-62837","enisaUuid":"c62de8e6-b729-3b4a-b80d-18cf6c00c75e","description":"BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a user identifier or group identifier in executor/oci/user.go and solver/llbsolver/ops/user_linux.go. A malicious base image or build could provide oversized files that exhausted memory during user resolution and caused out-of-memory termination of the buildkitd process. This issue is fixed in version 0.31.1.","datePublished":"Aug 19, 2026, 8:01:18 PM","dateUpdated":"Aug 21, 2026, 7:04:32 PM","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\nhttps://github.com/moby/buildkit/commit/408266e4ba254cecabedaacdad6905de4d2a75a1\nhttps://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\nhttps://github.com/moby/buildkit/releases/tag/v0.31.1\n","aliases":"CVE-2026-61712\nGHSA-72x6-4j93-7w86\n","assigner":"GitHub_M","epss":0.4,"enisaIdProduct":[{"id":"917ec6d6-eaf2-3607-bfec-01c4f4ca150d","product":{"name":"buildkit","vendor":{"name":"moby"}},"product_version":"\u003c 0.31.1"}],"enisaIdVendor":[{"id":"07bef3c2-9cd7-30b7-9047-8fdfa70e84f1","vendor":{"name":"moby"}}],"enisaIdVulnerability":[{"id":"077598dc-190d-3071-b736-15dd2f4172bb","vulnerability":{"id":"GHSA-72x6-4j93-7w86","description":"BuildKit has a possible runtime DoS via unbounded group parsing","datePublished":"Aug 19, 2026, 8:24:01 PM","dateUpdated":"Aug 19, 2026, 8:24:01 PM","baseScore":0.0,"references":"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\nhttps://github.com/moby/buildkit/commit/408266e4ba254cecabedaacdad6905de4d2a75a1\nhttps://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\nhttps://github.com/moby/buildkit\nhttps://github.com/moby/buildkit/releases/tag/v0.31.1\n","enisa_id":"EUVD-2026-62837\n","aliases":"GHSA-72x6-4j93-7w86\nCVE-2026-61712\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:51:44 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"1934d65c-c882-3f66-8b09-e4313570cd3e","vulnerability":{"id":"CVE-2026-61712","description":"BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. Prior to 0.31.1, BuildKit read attacker-controlled /etc/passwd and /etc/group files without an upper bound while resolving a username to a user identifier or group identifier in executor/oci/user.go and solver/llbsolver/ops/user_linux.go. A malicious base image or build could provide oversized files that exhausted memory during user resolution and caused out-of-memory termination of the buildkitd process. This issue is fixed in version 0.31.1.","datePublished":"Aug 19, 2026, 8:01:18 PM","dateUpdated":"Aug 21, 2026, 7:04:32 PM","status":"PUBLISHED","baseScore":2.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","references":"https://github.com/moby/buildkit/security/advisories/GHSA-72x6-4j93-7w86\nhttps://github.com/moby/buildkit/commit/408266e4ba254cecabedaacdad6905de4d2a75a1\nhttps://github.com/moby/buildkit/commit/69a3924648e485acb3faad3081e03a8554431255\nhttps://github.com/moby/buildkit/releases/tag/v0.31.1\n","enisa_id":"EUVD-2026-62837\n","assigner":"GitHub_M","epss":0.4,"dataProcessed":"Nov 14, 2026, 7:19:11 AM","vulnerabilityProduct":[{"id":"d93464e6-6130-333e-bd9f-b48e006544c5","product":{"name":"buildkit","vendor":{"name":"moby"}},"product_version":"\u003c 0.31.1"}],"vulnerabilityVendor":[{"id":"17c6eefc-3d12-394f-9c8a-1ca1e33b8849","vendor":{"name":"moby"}}]}}],"enisaIdAdvisory":[{"id":"63edc94e-ecf9-382f-90fa-0f10ecc45618","advisory":{"id":"msrc_CVE-2026-61712","description":"BuildKit: Possible runtime DoS via unbounded group parsing","datePublished":"Aug 23, 2026, 1:04:17 AM","dateUpdated":"Sep 10, 2026, 3:34:38 AM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-61712.json\n","aliases":"CVE-2026-61712\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"12987cc1-ede8-30bf-a2cd-e603dca5fae4","product":{"name":"moby-engine","vendor":{"name":"Microsoft"}}},{"id":"4215416d-d613-3baa-b502-e47e6f43456f","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"87335783-a77a-347b-9d05-c6716970ba94","product":{"name":"3.0","vendor":{"name":"Wind River"}}},{"id":"98178729-7979-3402-8e39-e92850413dbf","product":{"name":"azl3 moby-engine 0:25.0.3-19.azl3","vendor":{"name":"Microsoft"}}},{"id":"cb81b869-cce5-3de8-afc7-ad842912cafa","product":{"name":"azl3 moby-engine 0:25.0.3-20.azl3","vendor":{"name":"Microsoft"}}}]}},{"id":"a599c690-7b3b-3c8b-ad33-f7513008d388","advisory":{"id":"WID-SEC-W-2026-2111","description":"docker: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in docker ausnutzen, um einen Denial of Service Angriff durchzuführen oder Sicherheitsmaßnahmen zu umgehen.","datePublished":"Jun 28, 2026, 10:00:00 PM","dateUpdated":"Nov 1, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2111.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-2111\n","aliases":"CVE-2026-61711\nCVE-2026-61712\nCVE-2026-61801\nCVE-2026-75593\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"079b4bd4-d1d5-35de-b60e-6b60ce90e582","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"20e1d633-df1a-3978-b365-6e7878308b08","product":{"name":"Amazon Linux 2","vendor":{"name":"Amazon"}}},{"id":"267ed44a-dc10-319f-bb49-2e486cc77189","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"6735d4ec-1d1e-3e19-bfbe-a4cf0988f155","product":{"name":"Docker","vendor":{"name":"[UNKNOWN]"}}},{"id":"899ee541-588f-32eb-9db3-8cb15d302629","product":{"name":"cli 29.6.1","vendor":{"name":"open source"}}},{"id":"a2274b6a-e29f-3e7b-ad00-c36cd99f4756","product":{"name":"azl3","vendor":{"name":"Microsoft"}}},{"id":"ba26b933-407f-3fb8-8ef5-cd6affeb9c84","product":{"name":"SUSE openSUSE","vendor":{"name":"SUSE"}}},{"id":"f3c95427-61c0-3e6a-a695-6cb6adbff2c4","product":{"name":"SUSE Linux","vendor":{"name":"SUSE"}}}]}}]}