docker.io/docker:24.0.6-dind linux/amd64

docker.io/docker:24.0.6-dind - Trivy安全扫描结果扫描时间: 2024-12-03 14:16

全部漏洞信息

低危漏洞:10

中危漏洞:196

高危漏洞:54

严重漏洞:20

系统OS: alpine 3.18.4 扫描引擎: Trivy 扫描时间: 2024-12-03 14:16

docker.io/docker:24.0.6-dind (alpine 3.18.4) (alpine)

低危漏洞:6

中危漏洞:40

高危漏洞:7

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
krb5-libs	CVE-2024-37371	严重	1.20.1-r1	1.20.2-r1	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
krb5-libs	CVE-2024-37370	高危	1.20.1-r1	1.20.2-r1	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libcrypto3	CVE-2023-5363	高危	3.1.3-r0	3.1.4-r0	openssl: Incorrect cipher key and IV length processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-10-25 18:17 修改: 2024-10-14 15:15
libssl3	CVE-2023-5363	高危	3.1.3-r0	3.1.4-r0	openssl: Incorrect cipher key and IV length processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-10-25 18:17 修改: 2024-10-14 15:15
openssh-client-common	CVE-2024-6387	高危	9.3_p2-r0	9.3_p2-r2	openssh: regreSSHion - race condition in SSH allows RCE/DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387 镜像层: sha256:6f02639410c7e5b230cf1508e45c2ed0015a5ce094ec26d895ebce07e2c4deb1 发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-client-default	CVE-2024-6387	高危	9.3_p2-r0	9.3_p2-r2	openssh: regreSSHion - race condition in SSH allows RCE/DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387 镜像层: sha256:6f02639410c7e5b230cf1508e45c2ed0015a5ce094ec26d895ebce07e2c4deb1 发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssh-keygen	CVE-2024-6387	高危	9.3_p2-r0	9.3_p2-r2	openssh: regreSSHion - race condition in SSH allows RCE/DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387 镜像层: sha256:6f02639410c7e5b230cf1508e45c2ed0015a5ce094ec26d895ebce07e2c4deb1 发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
openssl	CVE-2023-5363	高危	3.1.3-r0	3.1.4-r0	openssl: Incorrect cipher key and IV length processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2023-10-25 18:17 修改: 2024-10-14 15:15
busybox	CVE-2023-42363	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free in awk 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
busybox	CVE-2023-42364	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
krb5-libs	CVE-2023-36054	中危	1.20.1-r1	1.20.2-r0	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
busybox	CVE-2023-42365	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
libcrypto3	CVE-2023-5678	中危	3.1.3-r0	3.1.4-r1	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libcrypto3	CVE-2023-6129	中危	3.1.3-r0	3.1.4-r3	openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-01-09 17:15 修改: 2024-10-14 15:15
libcrypto3	CVE-2023-6237	中危	3.1.3-r0	3.1.4-r4	openssl: Excessive time spent checking invalid RSA public keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-04-25 07:15 修改: 2024-11-01 15:35
libcrypto3	CVE-2024-0727	中危	3.1.3-r0	3.1.4-r5	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libcrypto3	CVE-2024-4603	中危	3.1.3-r0	3.1.5-r0	openssl: Excessive time spent checking DSA keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libcrypto3	CVE-2024-4741	中危	3.1.3-r0	3.1.6-r0	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-11-13 11:15 修改: 2024-11-13 17:01
libcrypto3	CVE-2024-5535	中危	3.1.3-r0	3.1.6-r0	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libcrypto3	CVE-2024-6119	中危	3.1.3-r0	3.1.7-r0	openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
busybox	CVE-2023-42366	中危	1.36.1-r2	1.36.1-r6	busybox: A heap-buffer-overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
libssl3	CVE-2023-5678	中危	3.1.3-r0	3.1.4-r1	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl3	CVE-2023-6129	中危	3.1.3-r0	3.1.4-r3	openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-01-09 17:15 修改: 2024-10-14 15:15
libssl3	CVE-2023-6237	中危	3.1.3-r0	3.1.4-r4	openssl: Excessive time spent checking invalid RSA public keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-04-25 07:15 修改: 2024-11-01 15:35
libssl3	CVE-2024-0727	中危	3.1.3-r0	3.1.4-r5	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl3	CVE-2024-4603	中危	3.1.3-r0	3.1.5-r0	openssl: Excessive time spent checking DSA keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libssl3	CVE-2024-4741	中危	3.1.3-r0	3.1.6-r0	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-11-13 11:15 修改: 2024-11-13 17:01
libssl3	CVE-2024-5535	中危	3.1.3-r0	3.1.6-r0	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libssl3	CVE-2024-6119	中危	3.1.3-r0	3.1.7-r0	openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
busybox-binsh	CVE-2023-42363	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free in awk 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
openssh-client-common	CVE-2023-48795	中危	9.3_p2-r0	9.3_p2-r1	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:6f02639410c7e5b230cf1508e45c2ed0015a5ce094ec26d895ebce07e2c4deb1 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
busybox-binsh	CVE-2023-42364	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
openssh-client-default	CVE-2023-48795	中危	9.3_p2-r0	9.3_p2-r1	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:6f02639410c7e5b230cf1508e45c2ed0015a5ce094ec26d895ebce07e2c4deb1 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
busybox-binsh	CVE-2023-42365	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
openssh-keygen	CVE-2023-48795	中危	9.3_p2-r0	9.3_p2-r1	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:6f02639410c7e5b230cf1508e45c2ed0015a5ce094ec26d895ebce07e2c4deb1 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
busybox-binsh	CVE-2023-42366	中危	1.36.1-r2	1.36.1-r6	busybox: A heap-buffer-overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
openssl	CVE-2023-5678	中危	3.1.3-r0	3.1.4-r1	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
openssl	CVE-2023-6129	中危	3.1.3-r0	3.1.4-r3	openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-01-09 17:15 修改: 2024-10-14 15:15
openssl	CVE-2023-6237	中危	3.1.3-r0	3.1.4-r4	openssl: Excessive time spent checking invalid RSA public keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-04-25 07:15 修改: 2024-11-01 15:35
openssl	CVE-2024-0727	中危	3.1.3-r0	3.1.4-r5	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4603	中危	3.1.3-r0	3.1.5-r0	openssl: Excessive time spent checking DSA keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4741	中危	3.1.3-r0	3.1.6-r0	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-11-13 11:15 修改: 2024-11-13 17:01
openssl	CVE-2024-5535	中危	3.1.3-r0	3.1.6-r0	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
openssl	CVE-2024-6119	中危	3.1.3-r0	3.1.7-r0	openssl: Possible denial of service in X.509 name checks 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
ssl_client	CVE-2023-42363	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free in awk 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
ssl_client	CVE-2023-42364	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
ssl_client	CVE-2023-42365	中危	1.36.1-r2	1.36.1-r7	busybox: use-after-free 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
ssl_client	CVE-2023-42366	中危	1.36.1-r2	1.36.1-r6	busybox: A heap-buffer-overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
openssl	CVE-2024-2511	低危	3.1.3-r0	3.1.4-r6	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl	CVE-2024-9143	低危	3.1.3-r0	3.1.7-r1	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:81ce2c7e624b9a5dd149dc0cf20a3f82bcbce546972983660fd9282ebaa5baa8 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libssl3	CVE-2024-9143	低危	3.1.3-r0	3.1.7-r1	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libcrypto3	CVE-2024-9143	低危	3.1.3-r0	3.1.7-r1	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libcrypto3	CVE-2024-2511	低危	3.1.3-r0	3.1.4-r6	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl3	CVE-2024-2511	低危	3.1.3-r0	3.1.4-r6	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:cc2447e1835a40530975ab80bb1f872fbab0f2a0faecf2ab16fbbb89b3589438 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15

usr/local/bin/containerd (gobinary)

低危漏洞:0

中危漏洞:14

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.20.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.20.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2023-39318	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.7	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.7	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.7	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/bin/containerd-shim-runc-v2 (gobinary)

低危漏洞:0

中危漏洞:14

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.20.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.20.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2023-39318	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.7	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.7	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.7	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/bin/ctr (gobinary)

低危漏洞:0

中危漏洞:14

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.20.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.20.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2023-39318	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.7	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.7	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.7	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/bin/docker (gobinary)

低危漏洞:0

中危漏洞:14

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.20.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.20.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2023-39318	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.7	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.7	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.7	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:1a3be0fe3244a7f98eb58daad122ba379e326534a68b8f8ce918061d2e3a3a17 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/bin/docker-proxy (gobinary)

低危漏洞:0

中危漏洞:16

高危漏洞:3

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	24.0.6	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
stdlib	CVE-2024-24790	严重	1.20.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.20.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	24.0.6	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
github.com/docker/docker	GHSA-jq35-85cj-fj4p	中危	24.0.6	24.0.7, 23.0.8, 20.10.27	/sys/devices/virtual/powercap accessible by default to containers 漏洞详情: https://github.com/advisories/GHSA-jq35-85cj-fj4p 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
stdlib	CVE-2023-39318	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.7	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.7	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.7	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/bin/dockerd (gobinary)

低危漏洞:2

中危漏洞:25

高危漏洞:10

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	24.0.6	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
github.com/moby/buildkit	CVE-2024-23652	严重	v0.11.7-0.20230723230859-616c3f613b54	0.12.5	moby/buildkit: possible host system access from mount stub cleaner 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23652 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
github.com/moby/buildkit	CVE-2024-23653	严重	v0.11.7-0.20230723230859-616c3f613b54	0.12.5	moby/buildkit: Buildkit's interactive containers API does not validate entitlements check 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23653 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
stdlib	CVE-2024-24790	严重	1.20.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/opencontainers/runc	CVE-2024-21626	高危	v1.1.7	1.1.12	runc: file descriptor leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21626 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-01-31 22:15 修改: 2024-02-19 03:15
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	CVE-2023-47108	高危	v0.29.0	0.46.0	opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-10 19:15 修改: 2023-11-20 19:34
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace	CVE-2023-45142	高危	v0.29.0	0.44.0	opentelemetry: DoS vulnerability in otelhttp 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	CVE-2023-45142	高危	v0.29.0	0.44.0	opentelemetry: DoS vulnerability in otelhttp 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
golang.org/x/net	CVE-2023-39325	高危	v0.10.0	0.17.0	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
google.golang.org/grpc	GHSA-m425-mq94-257g	高危	v1.50.1	1.56.3, 1.57.1, 1.58.3	gRPC-Go HTTP/2 Rapid Reset vulnerability 漏洞详情: https://github.com/advisories/GHSA-m425-mq94-257g 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/moby/buildkit	CVE-2024-23651	高危	v0.11.7-0.20230723230859-616c3f613b54	0.12.5	moby/buildkit: possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23651 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:43
stdlib	CVE-2023-39325	高危	1.20.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/moby/buildkit	CVE-2024-23650	中危	v0.11.7-0.20230723230859-616c3f613b54	0.12.5	moby/buildkit: Possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23650 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:38
golang.org/x/net	CVE-2023-3978	中危	v0.10.0	0.13.0	golang.org/x/net/html: Cross site scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:20
golang.org/x/net	CVE-2023-44487	中危	v0.10.0	0.17.0	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
golang.org/x/net	CVE-2023-45288	中危	v0.10.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	GHSA-jq35-85cj-fj4p	中危	24.0.6	24.0.7, 23.0.8, 20.10.27	/sys/devices/virtual/powercap accessible by default to containers 漏洞详情: https://github.com/advisories/GHSA-jq35-85cj-fj4p 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
google.golang.org/grpc	CVE-2023-44487	中危	v1.50.1	1.58.3, 1.57.1, 1.56.3	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
google.golang.org/protobuf	CVE-2024-24786	中危	v1.28.1	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
github.com/cyphar/filepath-securejoin	GHSA-6xv5-86q9-7xr8	中危	v0.2.3	0.2.4	SecureJoin: on windows, paths outside of the rootfs could be inadvertently produced 漏洞详情: https://github.com/advisories/GHSA-6xv5-86q9-7xr8 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/containerd/containerd	GHSA-7ww5-4wqc-m92c	中危	v1.6.22	1.6.26, 1.7.11	containerd allows RAPL to be accessible to a container 漏洞详情: https://github.com/advisories/GHSA-7ww5-4wqc-m92c 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/docker/docker	CVE-2024-24557	中危	24.0.6	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
golang.org/x/crypto	CVE-2023-48795	中危	v0.2.0	0.17.0	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
stdlib	CVE-2023-39318	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.7	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.7	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.7	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/opencontainers/runc	CVE-2024-45310	低危	v1.1.7	1.1.14, 1.2.0-rc.3	runc: runc can be tricked into creating empty files/directories on host 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45310 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-03 19:15 修改: 2024-09-03 19:40
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.4.2	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

usr/local/bin/runc (gobinary)

低危漏洞:0

中危漏洞:14

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.20.7	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2023-39325	高危	1.20.7	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.7	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.7	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2023-39318	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.7	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.7	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.7	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.7	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.7	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.7	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.7	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.7	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.7	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.7	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.7	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.7	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.7	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:0f38a7a1d98d28eb3f5ef5c033c0af893a07afc2ee94806090361fa5c09a5f15 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/libexec/docker/cli-plugins/docker-buildx (gobinary)

低危漏洞:1

中危漏洞:25

高危漏洞:10

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.5-0.20230714235725-36e9e796c6fc+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
github.com/moby/buildkit	CVE-2024-23652	严重	v0.12.1-0.20230717122532-faa0cc7da353	0.12.5	moby/buildkit: possible host system access from mount stub cleaner 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23652 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
github.com/moby/buildkit	CVE-2024-23653	严重	v0.12.1-0.20230717122532-faa0cc7da353	0.12.5	moby/buildkit: Buildkit's interactive containers API does not validate entitlements check 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23653 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
stdlib	CVE-2024-24790	严重	1.20.6	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/opencontainers/runc	CVE-2024-21626	高危	v1.1.7	1.1.12	runc: file descriptor leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21626 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-01-31 22:15 修改: 2024-02-19 03:15
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	CVE-2023-47108	高危	v0.40.0	0.46.0	opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-11-10 19:15 修改: 2023-11-20 19:34
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace	CVE-2023-45142	高危	v0.40.0	0.44.0	opentelemetry: DoS vulnerability in otelhttp 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	CVE-2023-45142	高危	v0.40.0	0.44.0	opentelemetry: DoS vulnerability in otelhttp 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
golang.org/x/net	CVE-2023-39325	高危	v0.8.0	0.17.0	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
google.golang.org/grpc	GHSA-m425-mq94-257g	高危	v1.53.0	1.56.3, 1.57.1, 1.58.3	gRPC-Go HTTP/2 Rapid Reset vulnerability 漏洞详情: https://github.com/advisories/GHSA-m425-mq94-257g 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/moby/buildkit	CVE-2024-23651	高危	v0.12.1-0.20230717122532-faa0cc7da353	0.12.5	moby/buildkit: possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23651 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:43
stdlib	CVE-2023-39325	高危	1.20.6	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.6	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.6	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
golang.org/x/net	CVE-2023-3978	中危	v0.8.0	0.13.0	golang.org/x/net/html: Cross site scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:20
golang.org/x/net	CVE-2023-44487	中危	v0.8.0	0.17.0	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
golang.org/x/net	CVE-2023-45288	中危	v0.8.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.5-0.20230714235725-36e9e796c6fc+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
google.golang.org/grpc	CVE-2023-44487	中危	v1.53.0	1.58.3, 1.57.1, 1.56.3	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
google.golang.org/protobuf	CVE-2024-24786	中危	v1.30.0	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
github.com/docker/docker	GHSA-jq35-85cj-fj4p	中危	v24.0.5-0.20230714235725-36e9e796c6fc+incompatible	24.0.7, 23.0.8, 20.10.27	/sys/devices/virtual/powercap accessible by default to containers 漏洞详情: https://github.com/advisories/GHSA-jq35-85cj-fj4p 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/moby/buildkit	CVE-2024-23650	中危	v0.12.1-0.20230717122532-faa0cc7da353	0.12.5	moby/buildkit: Possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23650 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:38
golang.org/x/crypto	CVE-2023-48795	中危	v0.2.0	0.17.0	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
github.com/containerd/containerd	GHSA-7ww5-4wqc-m92c	中危	v1.7.2	1.6.26, 1.7.11	containerd allows RAPL to be accessible to a container 漏洞详情: https://github.com/advisories/GHSA-7ww5-4wqc-m92c 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
stdlib	CVE-2023-29409	中危	1.20.6	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-08-02 20:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39318	中危	1.20.6	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.6	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.6	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.6	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.6	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.20.6	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.20.6	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.20.6	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.6	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.6	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.6	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.6	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.20.6	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.20.6	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/opencontainers/runc	CVE-2024-45310	低危	v1.1.7	1.1.14, 1.2.0-rc.3	runc: runc can be tricked into creating empty files/directories on host 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45310 镜像层: sha256:bd0df2d87f719e52ca0fadc1518f028e68f4586b8375d3dd010dc8dbc42bdaf5 发布日期: 2024-09-03 19:15 修改: 2024-09-03 19:40

usr/local/libexec/docker/cli-plugins/docker-compose (gobinary)

低危漏洞:1

中危漏洞:20

高危漏洞:9

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2024-41110	严重	v24.0.6+incompatible	23.0.15, 26.1.5, 27.1.1, 25.0.6	moby: Authz zero length regression 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41110 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-07-24 17:15 修改: 2024-07-30 20:15
github.com/moby/buildkit	CVE-2024-23652	严重	v0.12.2	0.12.5	moby/buildkit: possible host system access from mount stub cleaner 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23652 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
github.com/moby/buildkit	CVE-2024-23653	严重	v0.12.2	0.12.5	moby/buildkit: Buildkit's interactive containers API does not validate entitlements check 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23653 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:44
stdlib	CVE-2024-24790	严重	1.21.1	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/opencontainers/runc	CVE-2024-21626	高危	v1.1.7	1.1.12	runc: file descriptor leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21626 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-01-31 22:15 修改: 2024-02-19 03:15
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	CVE-2023-47108	高危	v0.40.0	0.46.0	opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-11-10 19:15 修改: 2023-11-20 19:34
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace	CVE-2023-45142	高危	v0.40.0	0.44.0	opentelemetry: DoS vulnerability in otelhttp 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	CVE-2023-45142	高危	v0.40.0	0.44.0	opentelemetry: DoS vulnerability in otelhttp 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
golang.org/x/net	CVE-2023-39325	高危	v0.14.0	0.17.0	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
github.com/moby/buildkit	CVE-2024-23651	高危	v0.12.2	0.12.5	moby/buildkit: possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23651 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:43
stdlib	CVE-2023-39325	高危	1.21.1	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.21.1	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.21.1	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
github.com/containerd/containerd	GHSA-7ww5-4wqc-m92c	中危	v1.7.7	1.6.26, 1.7.11	containerd allows RAPL to be accessible to a container 漏洞详情: https://github.com/advisories/GHSA-7ww5-4wqc-m92c 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
golang.org/x/net	CVE-2023-44487	中危	v0.14.0	0.17.0	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
golang.org/x/net	CVE-2023-45288	中危	v0.14.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
google.golang.org/protobuf	CVE-2024-24786	中危	v1.31.0	1.33.0	golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-03-05 23:15 修改: 2024-11-07 17:35
github.com/docker/docker	CVE-2024-24557	中危	v24.0.6+incompatible	24.0.9, 25.0.2	moby: classic builder cache poisoning 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24557 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-02-01 17:15 修改: 2024-02-09 20:21
github.com/docker/docker	GHSA-jq35-85cj-fj4p	中危	v24.0.6+incompatible	24.0.7, 23.0.8, 20.10.27	/sys/devices/virtual/powercap accessible by default to containers 漏洞详情: https://github.com/advisories/GHSA-jq35-85cj-fj4p 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
github.com/moby/buildkit	CVE-2024-23650	中危	v0.12.2	0.12.5	moby/buildkit: Possible race condition with accessing subpaths from cache mounts 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23650 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-01-31 22:15 修改: 2024-02-09 01:38
golang.org/x/crypto	CVE-2023-48795	中危	v0.12.0	0.17.0	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
stdlib	CVE-2023-39326	中危	1.21.1	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.21.1	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.21.1	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-03-05 23:15 修改: 2024-11-04 19:35
stdlib	CVE-2023-45290	中危	1.21.1	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-03-05 23:15 修改: 2024-11-07 11:35
stdlib	CVE-2024-24783	中危	1.21.1	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-03-05 23:15 修改: 2024-11-05 17:35
stdlib	CVE-2024-24784	中危	1.21.1	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.21.1	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.21.1	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.1	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.1	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.1	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.1	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/opencontainers/runc	CVE-2024-45310	低危	v1.1.7	1.1.14, 1.2.0-rc.3	runc: runc can be tricked into creating empty files/directories on host 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45310 镜像层: sha256:a428d80afc3270d19ba9012b15f31d0b98a67557539d7d725acec66fc2dee60b 发布日期: 2024-09-03 19:15 修改: 2024-09-03 19:40