docker.io/calico/kube-controllers:v3.27.4 - Trivy镜像安全扫描结果

全部漏洞信息

低危漏洞:0

中危漏洞:4

高危漏洞:2

严重漏洞:0

系统OS: 扫描引擎: Trivy 扫描时间: 2024-11-11 21:39

usr/bin/check-status (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.12	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:df839becbe251db7769784cea57eb4cc2909832da809e22cec4b5a3a8c6ba6dc 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34155	中危	1.21.12	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:df839becbe251db7769784cea57eb4cc2909832da809e22cec4b5a3a8c6ba6dc 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.12	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:df839becbe251db7769784cea57eb4cc2909832da809e22cec4b5a3a8c6ba6dc 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

stdlib

CVE-2024-34156

高危

1.21.12

1.22.7, 1.23.1

encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:df839becbe251db7769784cea57eb4cc2909832da809e22cec4b5a3a8c6ba6dc

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35

stdlib

CVE-2024-34155

中危

1.21.12

1.22.7, 1.23.1

go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:df839becbe251db7769784cea57eb4cc2909832da809e22cec4b5a3a8c6ba6dc

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35

stdlib

CVE-2024-34158

中危

1.21.12

1.22.7, 1.23.1

go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:df839becbe251db7769784cea57eb4cc2909832da809e22cec4b5a3a8c6ba6dc

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/bin/kube-controllers (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-34156	高危	1.21.12	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:a4e252c7fdea9ab84b06375cc056b3186bd7e7852a37a126073c39f5944f5824 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34155	中危	1.21.12	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:a4e252c7fdea9ab84b06375cc056b3186bd7e7852a37a126073c39f5944f5824 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34158	中危	1.21.12	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:a4e252c7fdea9ab84b06375cc056b3186bd7e7852a37a126073c39f5944f5824 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

stdlib

CVE-2024-34156

高危

1.21.12

1.22.7, 1.23.1

encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion