docker.elastic.co/beats/elastic-agent:8.13.3 linux/amd64

docker.elastic.co/beats/elastic-agent:8.13.3 - Trivy安全扫描结果扫描时间: 2024-12-10 15:26

全部漏洞信息

低危漏洞:41

中危漏洞:180

高危漏洞:21

严重漏洞:27

系统OS: ubuntu 20.04 扫描引擎: Trivy 扫描时间: 2024-12-10 15:26

docker.elastic.co/beats/elastic-agent:8.13.3 (ubuntu 20.04) (ubuntu)

低危漏洞:39

中危漏洞:34

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
curl	CVE-2024-7264	中危	7.68.0-1ubuntu2.22	7.68.0-1ubuntu2.23	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-07-31 08:15 修改: 2024-10-30 20:35
curl	CVE-2024-8096	中危	7.68.0-1ubuntu2.22	7.68.0-1ubuntu2.24	curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
libc-bin	CVE-2024-2961	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.15	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33599	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33600	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33601	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc-bin	CVE-2024-33602	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-2961	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.15	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33599	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33600	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33601	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libc6	CVE-2024-33602	中危	2.31-0ubuntu9.14	2.31-0ubuntu9.16	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
libcurl4	CVE-2024-7264	中危	7.68.0-1ubuntu2.22	7.68.0-1ubuntu2.23	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-07-31 08:15 修改: 2024-10-30 20:35
libcurl4	CVE-2024-8096	中危	7.68.0-1ubuntu2.22	7.68.0-1ubuntu2.24	curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
libgssapi-krb5-2	CVE-2024-26462	中危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libgssapi-krb5-2	CVE-2024-37370	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libgssapi-krb5-2	CVE-2024-37371	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libk5crypto3	CVE-2024-26462	中危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libk5crypto3	CVE-2024-37370	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libk5crypto3	CVE-2024-37371	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5-3	CVE-2024-26462	中危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5-3	CVE-2024-37370	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libkrb5-3	CVE-2024-37371	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libkrb5support0	CVE-2024-26462	中危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/kdc/ndr.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5support0	CVE-2024-37370	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libkrb5support0	CVE-2024-37371	中危	1.17-6ubuntu4.4	1.17-6ubuntu4.6	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libpam-modules	CVE-2024-10041	中危	1.3.1-5ubuntu4.7		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-10-23 14:15 修改: 2024-11-25 00:15
libpam-modules	CVE-2024-10963	中危	1.3.1-5ubuntu4.7		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libpam-modules-bin	CVE-2024-10041	中危	1.3.1-5ubuntu4.7		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-10-23 14:15 修改: 2024-11-25 00:15
libpam-modules-bin	CVE-2024-10963	中危	1.3.1-5ubuntu4.7		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libpam-runtime	CVE-2024-10041	中危	1.3.1-5ubuntu4.7		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-10-23 14:15 修改: 2024-11-25 00:15
libpam-runtime	CVE-2024-10963	中危	1.3.1-5ubuntu4.7		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libpam0g	CVE-2024-10041	中危	1.3.1-5ubuntu4.7		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-10-23 14:15 修改: 2024-11-25 00:15
libpam0g	CVE-2024-10963	中危	1.3.1-5ubuntu4.7		pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-11-07 16:15 修改: 2024-11-11 18:15
libgssapi-krb5-2	CVE-2024-26461	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
gpgv	CVE-2022-3219	低危	2.2.19-3ubuntu2.2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
libgcrypt20	CVE-2024-2236	低危	1.8.5-5ubuntu1.1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-03-06 22:15 修改: 2024-11-12 18:15
libkrb5support0	CVE-2024-26458	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5support0	CVE-2024-26461	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libncurses6	CVE-2023-45918	低危	6.2-0ubuntu2.1		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
libncurses6	CVE-2023-50495	低危	6.2-0ubuntu2.1		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libncursesw6	CVE-2023-45918	低危	6.2-0ubuntu2.1		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
libncursesw6	CVE-2023-50495	低危	6.2-0ubuntu2.1		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
coreutils	CVE-2016-2781	低危	8.30-3ubuntu2		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32
libk5crypto3	CVE-2024-26458	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libk5crypto3	CVE-2024-26461	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libc6	CVE-2016-20013	低危	2.31-0ubuntu9.14		漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20013 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2022-02-19 05:15 修改: 2022-03-03 16:43
libc-bin	CVE-2016-20013	低危	2.31-0ubuntu9.14		漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20013 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2022-02-19 05:15 修改: 2022-03-03 16:43
libgssapi-krb5-2	CVE-2024-26458	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5-3	CVE-2024-26458	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5-3	CVE-2024-26461	低危	1.17-6ubuntu4.4		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libpcre2-8-0	CVE-2022-41409	低危	10.34-7ubuntu0.1		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-07-18 14:15 修改: 2023-07-27 03:46
libpcre3	CVE-2017-11164	低危	2:8.39-12ubuntu0.1		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2017-07-11 03:29 修改: 2023-11-07 02:38
libssl1.1	CVE-2024-2511	低危	1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-4741	低危	1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-11-13 11:15 修改: 2024-11-13 17:01
libssl1.1	CVE-2024-5535	低危	1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libsystemd0	CVE-2023-26604	低危	245.4-4ubuntu3.23		systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libsystemd0	CVE-2023-7008	低危	245.4-4ubuntu3.23		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-12-23 13:15 修改: 2024-11-22 12:15
libtinfo6	CVE-2023-45918	低危	6.2-0ubuntu2.1		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
libtinfo6	CVE-2023-50495	低危	6.2-0ubuntu2.1		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libudev1	CVE-2023-26604	低危	245.4-4ubuntu3.23		systemd: privilege escalation via the less pager 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-03-03 16:15 修改: 2023-11-07 04:09
libudev1	CVE-2023-7008	低危	245.4-4ubuntu3.23		systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-12-23 13:15 修改: 2024-11-22 12:15
login	CVE-2013-4235	低危	1:4.8.1-1ubuntu5.20.04.5		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
login	CVE-2023-29383	低危	1:4.8.1-1ubuntu5.20.04.5		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
ncurses-base	CVE-2023-45918	低危	6.2-0ubuntu2.1		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
ncurses-base	CVE-2023-50495	低危	6.2-0ubuntu2.1		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
ncurses-bin	CVE-2023-45918	低危	6.2-0ubuntu2.1		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2024-02-16 22:15 修改: 2024-11-21 21:15
ncurses-bin	CVE-2023-50495	低危	6.2-0ubuntu2.1		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
openssl	CVE-2024-2511	低危	1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4741	低危	1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-11-13 11:15 修改: 2024-11-13 17:01
openssl	CVE-2024-5535	低危	1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:d30e1325589d06afbbbf57507585d874b3c9332b82e5986398ff1819ce0c8dad 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
passwd	CVE-2013-4235	低危	1:4.8.1-1ubuntu5.20.04.5		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
passwd	CVE-2023-29383	低危	1:4.8.1-1ubuntu5.20.04.5		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:e915d510ff2b469b8d03347ad6e785254beeb449931f7631dbcede8e5f281540 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05

Java (jar)

低危漏洞:0

中危漏洞:2

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
org.bouncycastle:bc-fips	CVE-2022-45146	中危	1.0.2.1	1.0.2.4	bouncy-castle: Improper Authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45146 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2022-11-21 10:15 修改: 2024-02-13 19:15
org.bouncycastle:bc-fips	CVE-2024-29857	中危	1.0.2.1	1.0.2.5	org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-05-14 15:17 修改: 2024-08-15 19:35

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

org.bouncycastle:bc-fips

CVE-2022-45146

中危

1.0.2.1

1.0.2.4

bouncy-castle: Improper Authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45146

镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33

发布日期: 2022-11-21 10:15 修改: 2024-02-13 19:15

org.bouncycastle:bc-fips

CVE-2024-29857

中危

1.0.2.1

1.0.2.5

org.bouncycastle: Importing an EC certificate with crafted F2m parameters may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29857

镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33

发布日期: 2024-05-14 15:17 修改: 2024-08-15 19:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/apm-server (gobinary)

低危漏洞:0

中危漏洞:6

高危漏洞:0

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net	CVE-2023-45288	中危	v0.21.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/auditbeat (gobinary)

低危漏洞:0

中危漏洞:7

高危漏洞:0

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net	CVE-2023-45288	中危	v0.21.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/cloud-defend (gobinary)

低危漏洞:0

中危漏洞:17

高危漏洞:5

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.1	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
google.golang.org/grpc	GHSA-m425-mq94-257g	高危	v1.47.0	1.56.3, 1.57.1, 1.58.3	gRPC-Go HTTP/2 Rapid Reset vulnerability 漏洞详情: https://github.com/advisories/GHSA-m425-mq94-257g 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2023-39325	高危	v0.9.0	0.17.0	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-39325	高危	1.21.1	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.21.1	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.21.1	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
google.golang.org/protobuf	CVE-2024-24786	中危	v1.28.1	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
golang.org/x/net	CVE-2023-44487	中危	v0.9.0	0.17.0	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
golang.org/x/net	CVE-2023-45288	中危	v0.9.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
golang.org/x/net	CVE-2023-3978	中危	v0.9.0	0.13.0	golang.org/x/net/html: Cross site scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:20
google.golang.org/grpc	CVE-2023-44487	中危	v1.47.0	1.58.3, 1.57.1, 1.56.3	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
stdlib	CVE-2023-39326	中危	1.21.1	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.21.1	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.21.1	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.21.1	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.21.1	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.21.1	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.21.1	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.21.1	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.1	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.1	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.1	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.1	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/cloudbeat (gobinary)

低危漏洞:1

中危漏洞:12

高危漏洞:4

严重漏洞:5

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
github.com/hashicorp/go-getter	CVE-2024-3817	严重	v1.7.2	1.7.4	HashiCorp\u2019s go-getter library is vulnerable to argument injection ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3817 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-17 20:15 修改: 2024-04-18 13:04
github.com/moby/buildkit	CVE-2024-23652	严重	v0.11.6	0.12.5	moby/buildkit: possible host system access from mount stub cleaner 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23652 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
github.com/moby/buildkit	CVE-2024-23653	严重	v0.11.6	0.12.5	moby/buildkit: Buildkit's interactive containers API does not validate entitlements check 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23653 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
stdlib	CVE-2024-24790	严重	1.22.2	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/moby/buildkit	CVE-2024-23651	高危	v0.11.6	0.12.5	moby/buildkit: possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23651 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:43
helm.sh/helm/v3	CVE-2024-26147	高危	v3.13.0	3.14.2	helm: Missing YAML Content Leads To Panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26147 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-21 23:15 修改: 2024-02-22 19:07
github.com/hashicorp/go-getter	CVE-2024-6257	高危	v1.7.2	1.7.5	hashicorp/go-getter: Arbitrary command execution through local git config file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6257 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-25 17:15 修改: 2024-06-25 18:50
stdlib	CVE-2024-24788	高危	1.22.2	1.22.3	golang: net: malformed DNS message can cause infinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24788 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-05-08 16:15 修改: 2024-06-14 13:15
github.com/moby/buildkit	CVE-2024-23650	中危	v0.11.6	0.12.5	moby/buildkit: Possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23650 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:38
github.com/open-policy-agent/opa	CVE-2024-8260	中危	v0.60.0	0.68.0	opa: OPA SMB Force-Authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8260 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-08-30 13:15 修改: 2024-09-19 16:08
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
helm.sh/helm/v3	CVE-2019-25210	中危	v3.13.0		helm: shows secrets with --dry-run option in clear text 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25210 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-03 21:15 修改: 2024-09-04 18:35
helm.sh/helm/v3	CVE-2024-25620	中危	v3.13.0	3.14.1	helm: Dependency management path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25620 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-15 00:15 修改: 2024-02-15 06:23
github.com/aquasecurity/trivy	CVE-2024-35192	中危	v0.48.3	0.51.2	Trivy possibly leaks registry credential when scanning images from malicious registries 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35192 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-05-20 21:15 修改: 2024-05-21 12:37
github.com/Azure/azure-sdk-for-go/sdk/azidentity	CVE-2024-35255	中危	v1.5.1	1.6.0	azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-11 17:16 修改: 2024-06-20 16:31
stdlib	CVE-2024-24789	中危	1.22.2	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.22.2	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.22.2	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.22.2	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.22.2	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

usr/share/elastic-agent/data/elastic-agent-b333e3/components/filebeat (gobinary)

低危漏洞:0

中危漏洞:8

高危漏洞:0

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/hashicorp/go-retryablehttp	CVE-2024-6104	中危	v0.6.6	0.7.7	go-retryablehttp: url might write sensitive information to log file 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6104 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-24 17:15 修改: 2024-06-26 17:19
golang.org/x/net	CVE-2023-45288	中危	v0.21.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/fleet-server (gobinary)

低危漏洞:0

中危漏洞:7

高危漏洞:0

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
google.golang.org/protobuf	CVE-2024-24786	中危	v1.31.0	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
golang.org/x/net	CVE-2023-45288	中危	v0.17.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/heartbeat (gobinary)

低危漏洞:0

中危漏洞:7

高危漏洞:0

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net	CVE-2023-45288	中危	v0.21.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/metricbeat (gobinary)

低危漏洞:1

中危漏洞:8

高危漏洞:0

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
golang.org/x/net	CVE-2023-45288	中危	v0.21.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/Azure/azure-sdk-for-go/sdk/azidentity	CVE-2024-35255	中危	v1.2.2	1.6.0	azure-identity: Azure Identity Libraries Elevation of Privilege Vulnerability in github.com/Azure/azure-sdk-for-go/sdk/azidentity 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35255 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-11 17:16 修改: 2024-06-20 16:31
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

usr/share/elastic-agent/data/elastic-agent-b333e3/components/osquery-extension.ext (gobinary)

低危漏洞:0

中危漏洞:5

高危漏洞:0

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/osquerybeat (gobinary)

低危漏洞:0

中危漏洞:7

高危漏洞:0

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net	CVE-2023-45288	中危	v0.21.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/packetbeat (gobinary)

低危漏洞:0

中危漏洞:7

高危漏洞:0

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net	CVE-2023-45288	中危	v0.21.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/pf-elastic-collector (gobinary)

低危漏洞:0

中危漏洞:14

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.1	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.21.1	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.21.1	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.21.1	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
golang.org/x/net	CVE-2023-45288	中危	v0.20.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
google.golang.org/protobuf	CVE-2024-24786	中危	v1.32.0	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
stdlib	CVE-2023-39326	中危	1.21.1	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.21.1	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.21.1	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.21.1	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.21.1	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.21.1	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.21.1	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.21.1	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.1	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.1	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.1	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.1	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/pf-elastic-symbolizer (gobinary)

低危漏洞:0

中危漏洞:14

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.1	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.21.1	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.21.1	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.21.1	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
golang.org/x/net	CVE-2023-45288	中危	v0.20.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
google.golang.org/protobuf	CVE-2024-24786	中危	v1.32.0	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
stdlib	CVE-2023-39326	中危	1.21.1	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.21.1	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.21.1	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.21.1	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.21.1	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.21.1	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.21.1	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.21.1	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.1	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.1	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.1	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.1	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/components/pf-host-agent (gobinary)

低危漏洞:0

中危漏洞:17

高危漏洞:3

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v23.0.3+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.1	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.21.1	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.21.1	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.21.1	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
google.golang.org/protobuf	CVE-2024-24786	中危	v1.32.0	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
github.com/docker/docker	CVE-2024-24557	中危	v23.0.3+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
github.com/docker/docker	CVE-2024-29018	中危	v23.0.3+incompatible	26.0.0-rc3, 25.0.5, 23.0.11	moby: external DNS requests from 'internal' networks could lead to data exfiltration 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29018 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-20 21:15 修改: 2024-03-21 12:58
github.com/docker/docker	GHSA-jq35-85cj-fj4p	中危	v23.0.3+incompatible	24.0.7, 23.0.8, 20.10.27	/sys/devices/virtual/powercap accessible by default to containers 漏洞详情: https://github.com/advisories/GHSA-jq35-85cj-fj4p 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2023-45288	中危	v0.20.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2023-39326	中危	1.21.1	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.21.1	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.21.1	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.21.1	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.21.1	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.21.1	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.21.1	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.21.1	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.1	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.1	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.1	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.1	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/share/elastic-agent/data/elastic-agent-b333e3/elastic-agent (gobinary)

低危漏洞:0

中危漏洞:8

高危漏洞:3

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.7+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
go.opentelemetry.io/collector/config/configgrpc	CVE-2024-36129	高危	v0.94.1	0.102.1	opentelemetry-collector: denial of service via specially crafted HTTP or gRPC request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36129 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 18:15 修改: 2024-06-18 17:34
go.opentelemetry.io/collector/config/confighttp	CVE-2024-36129	高危	v0.94.1	0.102.0	opentelemetry-collector: denial of service via specially crafted HTTP or gRPC request 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-36129 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 18:15 修改: 2024-06-18 17:34
github.com/mostynb/go-grpc-compression	GHSA-87m9-rv8p-rgmg	高危	v1.2.2	1.2.3	go-grpc-compression has a zstd decompression bombing vulnerability 漏洞详情: https://github.com/advisories/GHSA-87m9-rv8p-rgmg 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/rs/cors	GHSA-mh55-gqvf-xfwm	中危	v1.10.1	1.11.0	Denial of service via malicious preflight requests in github.com/rs/cors 漏洞详情: https://github.com/advisories/GHSA-mh55-gqvf-xfwm 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2023-45288	中危	v0.20.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.7+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:50433b1a54efd47aeb3a7418bf419423a864e65483b6750980b66d8885f4cc33 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35