docker.io/apecloud/syncer:0.5.0 - Trivy镜像安全扫描结果

全部漏洞信息

低危漏洞:2

中危漏洞:6

高危漏洞:3

严重漏洞:1

系统OS: alpine 3.21.0_alpha20240807 扫描引擎: Trivy 扫描时间: 2025-02-27 10:15

docker.io/apecloud/syncer:0.5.0 (alpine 3.21.0_alpha20240807) (alpine)

低危漏洞:2

中危漏洞:2

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libcrypto3	CVE-2024-6119	中危	3.3.1-r3	3.3.2-r0	openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:30f8e4588c9e02cc64ca7c31900a63826b14b9f77786fc8a13f6a641da95266e 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
libssl3	CVE-2024-6119	中危	3.3.1-r3	3.3.2-r0	openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:30f8e4588c9e02cc64ca7c31900a63826b14b9f77786fc8a13f6a641da95266e 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
libcrypto3	CVE-2024-9143	低危	3.3.1-r3	3.3.2-r3	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:30f8e4588c9e02cc64ca7c31900a63826b14b9f77786fc8a13f6a641da95266e 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libssl3	CVE-2024-9143	低危	3.3.1-r3	3.3.2-r3	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:30f8e4588c9e02cc64ca7c31900a63826b14b9f77786fc8a13f6a641da95266e 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35

bin/syncer (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:2

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2024-45337	严重	v0.26.0	0.31.0	golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337 镜像层: sha256:ee29c31d6c3aeb810ab237d208c1c55b5e7ca61f1441dc108907f71583e8b0c6 发布日期: 2024-12-12 02:02 修改: 2024-12-12 21:15
golang.org/x/net	CVE-2024-45338	高危	v0.25.0	0.33.0	golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338 镜像层: sha256:ee29c31d6c3aeb810ab237d208c1c55b5e7ca61f1441dc108907f71583e8b0c6 发布日期: 2024-12-18 21:15 修改: 2024-12-31 20:16
stdlib	CVE-2024-34156	高危	1.22.5	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:ee29c31d6c3aeb810ab237d208c1c55b5e7ca61f1441dc108907f71583e8b0c6 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34155	中危	1.22.5	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:ee29c31d6c3aeb810ab237d208c1c55b5e7ca61f1441dc108907f71583e8b0c6 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.22.5	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:ee29c31d6c3aeb810ab237d208c1c55b5e7ca61f1441dc108907f71583e8b0c6 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

bin/syncerctl (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.22.5	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:cc34b2167f11be202073c670226d790a0c701ddd33b67c03e8534c3897f61c75 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34155	中危	1.22.5	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:cc34b2167f11be202073c670226d790a0c701ddd33b67c03e8534c3897f61c75 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.22.5	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:cc34b2167f11be202073c670226d790a0c701ddd33b67c03e8534c3897f61c75 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

stdlib

CVE-2024-34156

高危

1.22.5

1.22.7, 1.23.1

encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion