docker.io/cloudflare/cloudflared:2026.9.1 linux/amd64

docker.io/cloudflare/cloudflared:2026.9.1 - Trivy安全扫描结果扫描时间: 2026-09-16 09:48

全部漏洞信息

低危漏洞:7

中危漏洞:17

高危漏洞:3

严重漏洞:0

系统OS: debian 13.6 扫描引擎: Trivy 扫描时间: 2026-09-16 09:48

docker.io/cloudflare/cloudflared:2026.9.1 (debian 13.6) (debian)

低危漏洞:7

中危漏洞:14

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libc6	CVE-2026-18374	中危	2.41-12+deb13u3		glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6	CVE-2026-19499	中危	2.41-12+deb13u3		glibc: Buffer Overflow in strfmon right-justification padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6	CVE-2026-19542	中危	2.41-12+deb13u3		glibc: Fix out-of-bounds array write in tdelete 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6	CVE-2026-5435	中危	2.41-12+deb13u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.41-12+deb13u3	2.41-12+deb13u4	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.41-12+deb13u3	2.41-12+deb13u4	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.41-12+deb13u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2026-6368	中危	2.41-12+deb13u3		glibc: glibc: Process abort due to invalid memory in wordexp 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6	CVE-2026-6791	中危	2.41-12+deb13u3		glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6	CVE-2026-77117	中危	2.41-12+deb13u3		glibc: Non-progress DoS in SHIFT_JISX0213 -&gt 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2026-80489	中危	2.41-12+deb13u3		glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2026-89092	中危	2.41-12+deb13u3		glibc: glibc: nscd stack overflow leads to degraded DNS resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-89092 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-11 02:18 修改: 2026-09-11 18:17
zlib1g	CVE-2026-27171	中危	1:1.3.dfsg+really1.3.1-1+b1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
zlib1g	CVE-2026-85091	中危	1:1.3.dfsg+really1.3.1-1+b1		zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091 镜像层: sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0 发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
libc6	CVE-2019-1010022	低危	2.41-12+deb13u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010023	低危	2.41-12+deb13u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010024	低危	2.41-12+deb13u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.41-12+deb13u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-9192	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libc6	CVE-2010-4756	低危	2.41-12+deb13u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6	CVE-2018-20796	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53

usr/local/bin/cloudflared (gobinary)

低危漏洞:0

中危漏洞:3

高危漏洞:3

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2026-56854	高危	v0.53.0	0.55.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authentication bypass due to unenforced source-address restrictions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56854 镜像层: sha256:6a47151292e788c9891de7aebfabf1d41220b93f1c422ec6c4364ce6b7679a7a 发布日期: 2026-08-28 16:18 修改: 2026-09-03 16:37
google.golang.org/grpc	CVE-2026-84304	高危	v1.83.0	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304 镜像层: sha256:6a47151292e788c9891de7aebfabf1d41220b93f1c422ec6c4364ce6b7679a7a 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc	CVE-2026-84445	高危	v1.83.0	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445 镜像层: sha256:6a47151292e788c9891de7aebfabf1d41220b93f1c422ec6c4364ce6b7679a7a 发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
golang.org/x/crypto	CVE-2026-56855	中危	v0.53.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855 镜像层: sha256:6a47151292e788c9891de7aebfabf1d41220b93f1c422ec6c4364ce6b7679a7a 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto	CVE-2026-78662	中危	v0.53.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662 镜像层: sha256:6a47151292e788c9891de7aebfabf1d41220b93f1c422ec6c4364ce6b7679a7a 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
google.golang.org/grpc	CVE-2026-84303	中危	v1.83.0	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303 镜像层: sha256:6a47151292e788c9891de7aebfabf1d41220b93f1c422ec6c4364ce6b7679a7a 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
golang.org/x/crypto	GO-2026-5932	未知	v0.53.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:6a47151292e788c9891de7aebfabf1d41220b93f1c422ec6c4364ce6b7679a7a 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00