docker.io/envoyproxy/envoy:distroless-v1.38.3 linux/amd64

docker.io/envoyproxy/envoy:distroless-v1.38.3 - Trivy安全扫描结果扫描时间: 2026-07-18 21:19

全部漏洞信息

低危漏洞:7

中危漏洞:4

高危漏洞:0

严重漏洞:0

系统OS: debian 12.14 扫描引擎: Trivy 扫描时间: 2026-07-18 21:19

docker.io/envoyproxy/envoy:distroless-v1.38.3 (debian 12.14) (debian)

低危漏洞:7

中危漏洞:4

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libc6	CVE-2026-5435	中危	2.36-9+deb12u14		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.36-9+deb12u14		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.36-9+deb12u14		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.36-9+deb12u14		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2010-4756	低危	2.36-9+deb12u14		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6	CVE-2018-20796	低危	2.36-9+deb12u14		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc6	CVE-2019-1010022	低危	2.36-9+deb12u14		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010023	低危	2.36-9+deb12u14		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010024	低危	2.36-9+deb12u14		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.36-9+deb12u14		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-9192	低危	2.36-9+deb12u14		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43