docker.io/envoyproxy/gateway:v1.9.1 linux/amd64

docker.io/envoyproxy/gateway:v1.9.1 - Trivy安全扫描结果扫描时间: 2026-09-17 13:52

全部漏洞信息

低危漏洞:7

中危漏洞:14

高危漏洞:1

严重漏洞:0

系统OS: debian 13.6 扫描引擎: Trivy 扫描时间: 2026-09-17 13:52

docker.io/envoyproxy/gateway:v1.9.1 (debian 13.6) (debian)

低危漏洞:7

中危漏洞:12

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libc6	CVE-2026-18374	中危	2.41-12+deb13u3		glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6	CVE-2026-19499	中危	2.41-12+deb13u3		glibc: Buffer Overflow in strfmon right-justification padding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6	CVE-2026-19542	中危	2.41-12+deb13u3		glibc: Fix out-of-bounds array write in tdelete 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6	CVE-2026-5435	中危	2.41-12+deb13u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc6	CVE-2026-5450	中危	2.41-12+deb13u3	2.41-12+deb13u4	glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-5928	中危	2.41-12+deb13u3	2.41-12+deb13u4	glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc6	CVE-2026-6238	中危	2.41-12+deb13u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libc6	CVE-2026-6368	中危	2.41-12+deb13u3		glibc: glibc: Process abort due to invalid memory in wordexp 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6	CVE-2026-6791	中危	2.41-12+deb13u3		glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6	CVE-2026-77117	中危	2.41-12+deb13u3		glibc: Non-progress DoS in SHIFT_JISX0213 -&gt 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6	CVE-2026-80489	中危	2.41-12+deb13u3		glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6	CVE-2026-89092	中危	2.41-12+deb13u3		glibc: glibc: nscd stack overflow leads to degraded DNS resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-89092 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2026-09-11 02:18 修改: 2026-09-11 18:17
libc6	CVE-2010-4756	低危	2.41-12+deb13u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6	CVE-2018-20796	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc6	CVE-2019-1010022	低危	2.41-12+deb13u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010023	低危	2.41-12+deb13u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010024	低危	2.41-12+deb13u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.41-12+deb13u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-9192	低危	2.41-12+deb13u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43

usr/local/bin/envoy-gateway (gobinary)

低危漏洞:0

中危漏洞:2

高危漏洞:1

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
google.golang.org/grpc	CVE-2026-84445	高危	v1.83.1	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445 镜像层: sha256:42912e321b7fa6690cd097bc987be7a913b1ea29a5806a1d355f37173592ca5b 发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
golang.org/x/crypto	CVE-2026-78662	中危	v0.55.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662 镜像层: sha256:42912e321b7fa6690cd097bc987be7a913b1ea29a5806a1d355f37173592ca5b 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
golang.org/x/crypto	CVE-2026-56855	中危	v0.55.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855 镜像层: sha256:42912e321b7fa6690cd097bc987be7a913b1ea29a5806a1d355f37173592ca5b 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto	GO-2026-5932	未知	v0.55.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:42912e321b7fa6690cd097bc987be7a913b1ea29a5806a1d355f37173592ca5b 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00