{"id":"GO-2024-2512","summary":"Classic builder cache poisoning in github.com/docker/docker","details":"Classic builder cache poisoning in github.com/docker/docker","aliases":["CVE-2024-24557","GHSA-xw73-rw38-6vjc"],"modified":"2026-07-17T21:15:19.760232206Z","published":"2024-06-28T15:28:53Z","database_specific":{"url":"https://pkg.go.dev/vuln/GO-2024-2512","review_status":"REVIEWED"},"references":[{"type":"ADVISORY","url":"https://github.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc"},{"type":"FIX","url":"https://github.com/moby/moby/commit/3e230cfdcc989dc524882f6579f9e0dac77400ae"},{"type":"FIX","url":"https://github.com/moby/moby/commit/fca702de7f71362c8d103073c7e4a1d0a467fadd"},{"type":"FIX","url":"https://github.com/moby/moby/commit/fce6e0ca9bc000888de3daa157af14fa41fcd0ff"}],"affected":[{"package":{"name":"github.com/docker/docker","ecosystem":"Go","purl":"pkg:golang/github.com/docker/docker"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"24.0.9+incompatible"},{"introduced":"25.0.0+incompatible"},{"fixed":"25.0.2+incompatible"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/docker/docker/builder/dockerfile"},{"path":"github.com/docker/docker/daemon/containerd","symbols":["imageCache.GetCache","isMatch","localCache.GetCache"]},{"path":"github.com/docker/docker/daemon/images","symbols":["ImageService.CommitImage","ImageService.CreateImage"]},{"path":"github.com/docker/docker/image","symbols":["store.IsBuiltLocally","store.SetBuiltLocally"]},{"symbols":["ImageCache.GetCache","LocalImageCache.GetCache","compare","getLocalCachedImage"],"path":"github.com/docker/docker/image/cache"}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2512.json"}},{"package":{"name":"github.com/moby/moby","ecosystem":"Go","purl":"pkg:golang/github.com/moby/moby"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"24.0.9+incompatible"},{"introduced":"25.0.0+incompatible"},{"fixed":"25.0.2+incompatible"}]}],"ecosystem_specific":{"imports":[{"path":"github.com/moby/moby/builder/dockerfile"},{"path":"github.com/moby/moby/daemon/containerd","symbols":["imageCache.GetCache","isMatch","localCache.GetCache"]},{"path":"github.com/moby/moby/daemon/images","symbols":["ImageService.CommitImage","ImageService.CreateImage"]},{"path":"github.com/moby/moby/image","symbols":["store.IsBuiltLocally","store.SetBuiltLocally"]},{"path":"github.com/moby/moby/image/cache","symbols":["ImageCache.GetCache","LocalImageCache.GetCache","compare","getLocalCachedImage"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2024-2512.json"}}],"schema_version":"1.7.5"}