{"id":"GO-2024-2512","summary":"Classic builder cache poisoning in github.com/docker/docker","details":"Classic builder cache poisoning in github.com/docker/docker","aliases":["CVE-2024-24557","GHSA-xw73-rw38-6vjc"],"modified":"2026-02-04T04:11:30.933192Z","published":"2024-06-28T15:28:53Z","related":["CGA-84m3-g3p3-gw6w"],"database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-2512","review_status":"REVIEWED"},"references":[{"type":"ADVISORY","url":"https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc"},{"type":"FIX","url":"https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae"},{"type":"FIX","url":"https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd"},{"type":"FIX","url":"https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff"}],"affected":[{"package":{"name":"github.com/docker/docker","ecosystem":"Go","purl":"pkg:golang/github.com/docker/docker"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"24.0.9+incompatible"},{"introduced":"25.0.0+incompatible"},{"fixed":"25.0.2+incompatible"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/docker/docker/builder/dockerfile"},{"symbols":["imageCache.GetCache","isMatch","localCache.GetCache"],"path":"github.com/docker/docker/daemon/containerd"},{"symbols":["ImageService.CommitImage","ImageService.CreateImage"],"path":"github.com/docker/docker/daemon/images"},{"symbols":["store.IsBuiltLocally","store.SetBuiltLocally"],"path":"github.com/docker/docker/image"},{"symbols":["ImageCache.GetCache","LocalImageCache.GetCache","compare","getLocalCachedImage"],"path":"github.com/docker/docker/image/cache"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2512.json"}},{"package":{"name":"github.com/moby/moby","ecosystem":"Go","purl":"pkg:golang/github.com/moby/moby"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"24.0.9+incompatible"},{"introduced":"25.0.0+incompatible"},{"fixed":"25.0.2+incompatible"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/moby/moby/builder/dockerfile"},{"symbols":["imageCache.GetCache","isMatch","localCache.GetCache"],"path":"github.com/moby/moby/daemon/containerd"},{"symbols":["ImageService.CommitImage","ImageService.CreateImage"],"path":"github.com/moby/moby/daemon/images"},{"symbols":["store.IsBuiltLocally","store.SetBuiltLocally"],"path":"github.com/moby/moby/image"},{"symbols":["ImageCache.GetCache","LocalImageCache.GetCache","compare","getLocalCachedImage"],"path":"github.com/moby/moby/image/cache"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2512.json"}}],"schema_version":"1.7.3"}