data/reports: add GO-2024-2497.yaml

Aliases: CVE-2024-23653, GHSA-wr6v-9f75-vh2g

Fixes #2497
Fixes #2498

Change-Id: I7ac3927fcd090405110f5e26aa77dc9a2459b327
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/562238
Run-TryBot: Tim King <[email protected]>
TryBot-Result: Gopher Robot <[email protected]>
LUCI-TryBot-Result: Go LUCI <[email protected]>
Reviewed-by: Damien Neil <[email protected]>

Author: timothy-king

data/osv/GO-2024-2497.json

@@ -0,0 +1,103 @@
+{
+  "schema_version": "1.3.1",
+  "id": "GO-2024-2497",
+  "modified": "0001-01-01T00:00:00Z",
+  "published": "0001-01-01T00:00:00Z",
+  "aliases": [
+    "CVE-2024-23653",
+    "GHSA-wr6v-9f75-vh2g"
+  ],
+  "summary": "Privilege escalation in github.com/moby/buildkit",
+  "details": "BuildKit provides APIs for running interactive containers based on built images. It was possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, running such containers is only allowed if special security.insecure entitlement is enabled both by buildkitd configuration and allowed by the user initializing the build request.",
+  "affected": [
+    {
+      "package": {
+        "name": "github.com/moby/buildkit",
+        "ecosystem": "Go"
+      },
+      "ranges": [
+        {
+          "type": "SEMVER",
+          "events": [
+            {
+              "introduced": "0"
+            },
+            {
+              "fixed": "0.12.5"
+            }
+          ]
+        }
+      ],
+      "ecosystem_specific": {
+        "imports": [
+          {
+            "path": "github.com/moby/buildkit/solver/llbsolver",
+            "symbols": [
+              "Solver.Solve",
+              "ValidateEntitlements",
+              "llbBridge.Exec",
+              "llbBridge.Run",
+              "provenanceBridge.Solve"
+            ]
+          },
+          {
+            "path": "github.com/moby/buildkit/frontend/gateway/forwarder",
+            "symbols": [
+              "BridgeClient.NewContainer",
+              "GatewayForwarder.Solve",
+              "LLBBridgeToGatewayClient"
+            ]
+          },
+          {
+            "path": "github.com/moby/buildkit/cmd/buildkitd",
+            "symbols": [
+              "newController"
+            ]
+          },
+          {
+            "path": "github.com/moby/buildkit/frontend/gateway/container",
+            "symbols": [
+              "NewContainer"
+            ]
+          },
+          {
+            "path": "github.com/moby/buildkit/frontend/gateway",
+            "symbols": [
+              "NewBridgeForwarder",
+              "gatewayFrontend.Solve",
+              "llbBridgeForwarder.NewContainer",
+              "newBridgeForwarder",
+              "serveLLBBridgeForwarder"
+            ]
+          }
+        ]
+      }
+    }
+  ],
+  "references": [
+    {
+      "type": "FIX",
+      "url": "https://github.com/moby/buildkit/pull/4602"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/moby/buildkit/commit/92cc595cfb12891d4b3ae476e067c74250e4b71e"
+    },
+    {
+      "type": "FIX",
+      "url": "https://github.com/moby/buildkit/commit/5026d95aa3336e97cfe46e3764f52d08bac7a10e"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/moby/buildkit/releases/tag/v0.12.5"
+    }
+  ],
+  "credits": [
+    {
+      "name": "@rmcnamara-snyk"
+    }
+  ],
+  "database_specific": {
+    "url": "https://pkg.go.dev/vuln/GO-2024-2497"
+  }
+}

data/reports/GO-2024-2497.yaml

@@ -0,0 +1,51 @@
+id: GO-2024-2497
+modules:
+    - module: github.com/moby/buildkit
+      versions:
+        - fixed: 0.12.5
+      vulnerable_at: 0.12.4
+      packages:
+        - package: github.com/moby/buildkit/solver/llbsolver
+          symbols:
+            - llbBridge.Exec
+            - llbBridge.Run
+            - ValidateEntitlements
+            - Solver.Solve
+            - provenanceBridge.Solve
+        - package: github.com/moby/buildkit/frontend/gateway/forwarder
+          symbols:
+            - BridgeClient.NewContainer
+            - LLBBridgeToGatewayClient
+            - GatewayForwarder.Solve
+        - package: github.com/moby/buildkit/cmd/buildkitd
+          symbols:
+            - newController
+        - package: github.com/moby/buildkit/frontend/gateway/container
+          symbols:
+            - NewContainer
+        - package: github.com/moby/buildkit/frontend/gateway
+          symbols:
+            - serveLLBBridgeForwarder
+            - newBridgeForwarder
+            - gatewayFrontend.Solve
+            - NewBridgeForwarder
+            - llbBridgeForwarder.NewContainer
+      fix_link: https://github.com/moby/buildkit/commit/5026d95aa3336e97cfe46e3764f52d08bac7a10e
+summary: Privilege escalation in github.com/moby/buildkit
+description: |-
+    BuildKit provides APIs for running interactive containers based on built images.
+    It was possible to use these APIs to ask BuildKit to run a container with
+    elevated privileges. Normally, running such containers is only allowed if
+    special security.insecure entitlement is enabled both by buildkitd
+    configuration and allowed by the user initializing the build request.
+cves:
+    - CVE-2024-23653
+ghsas:
+    - GHSA-wr6v-9f75-vh2g
+credits:
+    - '@rmcnamara-snyk'
+references:
+    - fix: https://github.com/moby/buildkit/pull/4602
+    - fix: https://github.com/moby/buildkit/commit/92cc595cfb12891d4b3ae476e067c74250e4b71e
+    - fix: https://github.com/moby/buildkit/commit/5026d95aa3336e97cfe46e3764f52d08bac7a10e
+    - web: https://github.com/moby/buildkit/releases/tag/v0.12.5