docker.io/netbirdio/netbird-server:0.76.3 linux/amd64

docker.io/netbirdio/netbird-server:0.76.3 - Trivy安全扫描结果扫描时间: 2026-08-08 23:48

全部漏洞信息

低危漏洞:7

中危漏洞:17

高危漏洞:4

严重漏洞:2

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-08 23:48

docker.io/netbirdio/netbird-server:0.76.3 (ubuntu 24.04) (ubuntu)

低危漏洞:6

中危漏洞:8

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
bsdutils	CVE-2026-27456	中危	1:2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libp11-kit0	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
libsmartcols1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libgcrypt20	CVE-2024-2236	低危	1.10.3-2ubuntu0.1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
login	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0	CVE-2026-40228	低危	255.4-1ubuntu8.16		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
passwd	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libudev1	CVE-2026-40228	低危	255.4-1ubuntu8.16		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
zlib1g	CVE-2026-27171	低危	1:1.3.dfsg-3.1ubuntu2.1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

go/bin/netbird-server (gobinary)

低危漏洞:1

中危漏洞:9

高危漏洞:4

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/jackc/pgx/v5	CVE-2026-33815	严重	v5.5.5	5.9.0	github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33815 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-04-07 16:16 修改: 2026-08-07 12:17
github.com/jackc/pgx/v5	CVE-2026-33816	严重	v5.5.5	5.9.0	github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33816 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-04-07 16:16 修改: 2026-08-03 13:18
github.com/docker/docker	CVE-2026-42306	高危	v28.0.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
github.com/docker/docker	CVE-2026-34040	高危	v28.0.1+incompatible	29.3.1	Moby: Moby: Authorization bypass vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34040 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-03-31 03:15 修改: 2026-06-17 10:38
github.com/docker/docker	CVE-2026-41567	高危	v28.0.1+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-06-05 02:17 修改: 2026-08-06 13:18
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.80.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/Azure/go-ntlmssp	CVE-2026-32952	中危	v0.1.0	0.1.1	go-ntlmssp: go-ntlmssp: Denial of Service via malicious NTLM challenge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32952 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:36
github.com/docker/docker	CVE-2026-33997	中危	v28.0.1+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-03-31 03:15 修改: 2026-08-03 13:18
github.com/pion/dtls/v3	CVE-2026-26014	中危	v3.0.9	3.1.1, 3.0.11	github.com/pion/dtls: Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26014 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-02-11 21:16 修改: 2026-06-17 10:25
github.com/pion/dtls/v3	CVE-2026-54908	中危	v3.0.9	3.1.4	Pion DTLS is a Go implementation of Datagram Transport Layer Security. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54908 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-07-01 20:17 修改: 2026-07-02 18:43
github.com/pion/stun/v3	CVE-2026-54909	中危	v3.1.0	3.1.5	pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAdd ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54909 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-07-31 23:17 修改: 2026-08-03 18:16
github.com/quic-go/quic-go	CVE-2025-64702	中危	v0.55.0	0.57.0	github.com/quic-go/quic-go/http3: quic-go HTTP/3 QPACK Header Expansion DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64702 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2025-12-11 21:15 修改: 2026-06-17 09:55
github.com/quic-go/quic-go	CVE-2026-40898	中危	v0.55.0	0.59.1	github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40898 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-06-04 19:16 修改: 2026-07-22 20:10
github.com/docker/docker	CVE-2026-41568	中危	v28.0.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
gopkg.in/square/go-jose.v2	CVE-2024-28180	中危	v2.6.0		jose-go: improper handling of highly compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28180 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2024-03-09 01:15 修改: 2026-06-17 07:21
github.com/jackc/pgx/v5	CVE-2026-41889	低危	v5.5.5	5.9.2	github.com/jackc/pgx: golang: pgx: SQL injection via specific SQL query conditions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41889 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 2026-05-08 17:16 修改: 2026-06-17 10:47
golang.org/x/crypto	GO-2026-5932	未知	v0.54.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:a643e23afcca113583edd00d2bb71c3da24fdf838ff3dc998d83fbbcc7b6daf1 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00