docker.io/netbirdio/netbird-server:0.79.0 linux/arm64

docker.io/netbirdio/netbird-server:0.79.0 - Trivy安全扫描结果扫描时间: 2026-09-20 22:10 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:5

中危漏洞:17

高危漏洞:7

严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-20 22:10

docker.io/netbirdio/netbird-server:0.79.0 (ubuntu 24.04) (ubuntu)

低危漏洞:4

中危漏洞:7

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
libc-bin	CVE-2026-18374	中危	2.39-0ubuntu8.9		glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6	CVE-2026-18374	中危	2.39-0ubuntu8.9		glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
perl-base	CVE-2026-15534	中危	5.38.2-3.2ubuntu0.4	5.38.2-3.2ubuntu0.6	perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-base	CVE-2026-19487	中危	5.38.2-3.2ubuntu0.4	5.38.2-3.2ubuntu0.6	perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
tar	CVE-2026-18477	中危	1.35+dfsg-3ubuntu0.4		tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
tar	CVE-2026-18508	中危	1.35+dfsg-3ubuntu0.4		tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
zlib1g	CVE-2026-85091	中危	1:1.3.dfsg-3.1ubuntu2.2		zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
libudev1	CVE-2026-40228	低危	255.4-1ubuntu8.17		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
login	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0	CVE-2026-40228	低危	255.4-1ubuntu8.17		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:8edaba05454265cd17270d38ec146446c640d1d25637413c3da64a3eff296c36 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

go/bin/netbird-server (gobinary)

低危漏洞:1

中危漏洞:10

高危漏洞:7

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
github.com/docker/docker	CVE-2026-41567	高危	v28.0.1+incompatible		docker: Moby/Docker Engine: Arbitrary Code Execution via malicious container image and compressed archive upload 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41567 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-06-05 02:17 修改: 2026-09-09 13:19
github.com/docker/docker	CVE-2026-42306	高危	v28.0.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42306 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:47
golang.org/x/mod	CVE-2026-56864	高危	v0.39.0	0.40.0	golang.org/x/mod/sumdb: golang.org/x/mod/sumdb: Integrity bypass via malicious GOSUMDB 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56864 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
golang.org/x/mod	CVE-2026-56865	高危	v0.39.0	0.40.0	golang.org/x/mod/sumdb/tlog: golang.org/x/mod/sumdb/tlog: Supply chain compromise via transparency log tile verification bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56865 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-08-13 22:17 修改: 2026-09-03 16:37
google.golang.org/grpc	CVE-2026-84304	高危	v1.80.0	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc	CVE-2026-84445	高危	v1.80.0	1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e	google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc	GHSA-hrxh-6v49-42gf	高危	v1.80.0	1.82.1	gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities 漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
github.com/pion/stun/v3	CVE-2026-54909	中危	v3.1.0	3.1.5	pion/stun is a Go implementation of STUN. Prior to 3.1.3, XORMappedAdd ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54909 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-07-31 23:17 修改: 2026-09-10 20:30
golang.org/x/crypto	CVE-2026-56855	中危	v0.55.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
golang.org/x/crypto	CVE-2026-78662	中危	v0.55.0	0.56.0	golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
github.com/Azure/go-ntlmssp	CVE-2026-32952	中危	v0.1.0	0.1.1	go-ntlmssp: go-ntlmssp: Denial of Service via malicious NTLM challenge 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32952 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-04-24 03:16 修改: 2026-06-17 10:36
github.com/docker/docker	CVE-2026-33997	中危	v28.0.1+incompatible	29.3.1	moby: docker: github.com/moby/moby: Moby: Privilege validation bypass during plugin installation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33997 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-03-31 03:15 修改: 2026-09-09 13:19
github.com/docker/docker	CVE-2026-41568	中危	v28.0.1+incompatible		github.com/docker/docker: github.com/moby/moby: Moby: Denial of Service via race condition in docker cp mount setup 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41568 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-06-12 19:16 修改: 2026-06-17 10:46
github.com/pion/dtls/v3	CVE-2026-26014	中危	v3.0.9	3.1.1, 3.0.11	github.com/pion/dtls: Pion DTLS uses random nonce generation with AES GCM ciphers risks leaking the authentication key 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26014 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-02-11 21:16 修改: 2026-06-17 10:25
github.com/pion/dtls/v3	CVE-2026-54908	中危	v3.0.9	3.1.4	Pion DTLS is a Go implementation of Datagram Transport Layer Security. ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54908 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-07-01 20:17 修改: 2026-07-02 18:43
google.golang.org/grpc	CVE-2026-84303	中危	v1.80.0	1.83.1	gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
gopkg.in/square/go-jose.v2	CVE-2024-28180	中危	v2.6.0		jose-go: improper handling of highly compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28180 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2024-03-09 01:15 修改: 2026-06-17 07:21
go.opentelemetry.io/otel/sdk	CVE-2026-81870	低危	v1.43.0	1.45.0	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-81870 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 2026-09-16 20:17 修改: 2026-09-17 15:16
golang.org/x/crypto	GO-2026-5932	未知	v0.55.0		The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues 漏洞详情: 镜像层: sha256:f79cd60fdbbfb16f1b48c0ee8bb7c532eb726013d6ef27eef88992949e4000d5 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00