docker.io/calico/ctl:v3.13.4 linux/amd64

docker.io/calico/ctl:v3.13.4 - Trivy安全扫描结果扫描时间: 2026-07-23 10:13

全部漏洞信息

低危漏洞:2

中危漏洞:8

高危漏洞:7

严重漏洞:1

系统OS: alpine 3.10.5 扫描引擎: Trivy 扫描时间: 2026-07-23 10:13

docker.io/calico/ctl:v3.13.4 (alpine 3.10.5) (alpine)

低危漏洞:2

中危漏洞:8

高危漏洞:7

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
apk-tools	CVE-2021-36159	严重	2.10.4-r2	2.10.7-r0	libfetch: an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes leads to information leak or crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36159 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-08-03 14:15 修改: 2026-06-17 03:58
apk-tools	CVE-2021-30139	高危	2.10.4-r2	2.10.6-r0	漏洞详情: https://avd.aquasec.com/nvd/cve-2021-30139 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-04-21 16:15 修改: 2026-06-17 03:49
busybox	CVE-2021-28831	高危	1.30.1-r3	1.30.1-r5	busybox: invalid free or segmentation fault via malformed gzip data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-03-19 05:15 修改: 2026-06-17 03:46
libcrypto1.1	CVE-2021-23840	高危	1.1.1g-r0	1.1.1j-r0	openssl: integer overflow in CipherUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1	CVE-2021-3450	高危	1.1.1g-r0	1.1.1k-r0	openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libssl1.1	CVE-2021-23840	高危	1.1.1g-r0	1.1.1j-r0	openssl: integer overflow in CipherUpdate 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1	CVE-2021-3450	高危	1.1.1g-r0	1.1.1k-r0	openssl: CA certificate check bypass with X509_V_FLAG_X509_STRICT 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3450 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
ssl_client	CVE-2021-28831	高危	1.30.1-r3	1.30.1-r5	busybox: invalid free or segmentation fault via malformed gzip data 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28831 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-03-19 05:15 修改: 2026-06-17 03:46
libcrypto1.1	CVE-2020-1971	中危	1.1.1g-r0	1.1.1i-r0	openssl: EDIPARTYNAME NULL pointer de-reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
libcrypto1.1	CVE-2021-23841	中危	1.1.1g-r0	1.1.1j-r0	openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1	CVE-2020-1971	中危	1.1.1g-r0	1.1.1i-r0	openssl: EDIPARTYNAME NULL pointer de-reference 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02
libssl1.1	CVE-2021-23841	中危	1.1.1g-r0	1.1.1j-r0	openssl: NULL pointer dereference in X509_issuer_and_serial_hash() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libssl1.1	CVE-2021-3449	中危	1.1.1g-r0	1.1.1k-r0	openssl: NULL pointer dereference in signature_algorithms processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
musl	CVE-2020-28928	中危	1.1.22-r3	1.1.22-r4	In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
musl-utils	CVE-2020-28928	中危	1.1.22-r3	1.1.22-r4	In musl libc through 1.2.1, wcsnrtombs mishandles particular combinati ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28928 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2020-11-24 18:15 修改: 2026-06-17 03:10
libcrypto1.1	CVE-2021-3449	中危	1.1.1g-r0	1.1.1k-r0	openssl: NULL pointer dereference in signature_algorithms processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3449 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-03-25 15:15 修改: 2026-06-17 04:05
libssl1.1	CVE-2021-23839	低危	1.1.1g-r0	1.1.1j-r0	openssl: incorrect SSLv2 rollback protection 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38
libcrypto1.1	CVE-2021-23839	低危	1.1.1g-r0	1.1.1j-r0	openssl: incorrect SSLv2 rollback protection 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23839 镜像层: sha256:1b3ee35aacca9866b01dd96e870136266bde18006ac2f0d6eb706c798d1fa3c3 发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38