docker.io/pingcap/tidb-operator:v1.6.0 linux/amd64

docker.io/pingcap/tidb-operator:v1.6.0 - Trivy安全扫描结果 扫描时间: 2024-10-27 08:00
全部漏洞信息
低危漏洞:1 中危漏洞:40 高危漏洞:26 严重漏洞:4

系统OS: rocky 9.2 扫描引擎: Trivy 扫描时间: 2024-10-27 08:00

docker.io/pingcap/tidb-operator:v1.6.0 (rocky 9.2) (rocky)
低危漏洞:1 中危漏洞:14 高危漏洞:20 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
glibc CVE-2024-2961 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
glibc CVE-2024-33599 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc CVE-2024-33600 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc CVE-2024-33601 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc CVE-2024-33602 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-common CVE-2024-2961 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
glibc-common CVE-2024-33599 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-common CVE-2024-33600 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-common CVE-2024-33601 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-common CVE-2024-33602 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-minimal-langpack CVE-2024-2961 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15
glibc-minimal-langpack CVE-2024-33599 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-minimal-langpack CVE-2024-33600 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-minimal-langpack CVE-2024-33601 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
glibc-minimal-langpack CVE-2024-33602 高危 2.34-60.el9 2.34-100.el9_4.2 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15
less CVE-2024-32487 高危 590-2.el9_2 590-4.el9_4 less: OS command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32487

镜像层: sha256:ca0b12471445c59cd7345bb3fd30c234ec86312083bb40dd04b2945f7b3ef972

发布日期: 2024-04-13 15:15 修改: 2024-07-08 14:18
python3 CVE-2023-6597 高危 3.9.16-1.el9_2.2 3.9.18-3.el9_4.1 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:ca0b12471445c59cd7345bb3fd30c234ec86312083bb40dd04b2945f7b3ef972

发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3 CVE-2024-0450 高危 3.9.16-1.el9_2.2 3.9.18-3.el9_4.1 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:ca0b12471445c59cd7345bb3fd30c234ec86312083bb40dd04b2945f7b3ef972

发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3-libs CVE-2023-6597 高危 3.9.16-1.el9_2.2 3.9.18-3.el9_4.1 python: Path traversal on tempfile.TemporaryDirectory

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597

镜像层: sha256:ca0b12471445c59cd7345bb3fd30c234ec86312083bb40dd04b2945f7b3ef972

发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3-libs CVE-2024-0450 高危 3.9.16-1.el9_2.2 3.9.18-3.el9_4.1 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:ca0b12471445c59cd7345bb3fd30c234ec86312083bb40dd04b2945f7b3ef972

发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
gnutls CVE-2024-28835 中危 3.7.6-20.el9_2 3.8.3-4.el9_4 gnutls: potential crash during chain building/verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-03-21 06:15 修改: 2024-09-16 19:16
glib2 CVE-2024-34397 中危 2.68.4-6.el9 2.68.4-14.el9_4.1 glib2: Signal subscription vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34397

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-05-07 18:15 修改: 2024-06-10 18:15
less CVE-2022-48624 中危 590-2.el9_2 590-3.el9_3 less: missing quoting of shell metacharacters in LESSCLOSE handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48624

镜像层: sha256:ca0b12471445c59cd7345bb3fd30c234ec86312083bb40dd04b2945f7b3ef972

发布日期: 2024-02-19 01:15 修改: 2024-06-10 18:15
libeconf CVE-2023-22652 中危 0.4.1-2.el9 0.4.1-3.el9_2 libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22652

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2023-06-01 12:15 修改: 2023-09-13 03:15
libeconf CVE-2023-30079 中危 0.4.1-2.el9 0.4.1-3.el9_2 libeconf: Stack overflow in function read_file at libeconf/lib/getfilecontents.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-30079

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2023-08-22 19:16 修改: 2023-11-07 04:13
libnghttp2 CVE-2024-28182 中危 1.43.0-5.el9 1.43.0-5.el9_4.3 nghttp2: CONTINUATION frames DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-04-04 15:15 修改: 2024-05-01 18:15
libxml2 CVE-2024-25062 中危 2.9.13-3.el9_1 2.9.13-6.el9_4 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-02-04 16:15 修改: 2024-02-13 00:40
openssl CVE-2024-6119 中危 1:3.0.7-6.el9_2 1:3.0.7-28.el9_4 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
openssl-libs CVE-2024-6119 中危 1:3.0.7-6.el9_2 1:3.0.7-28.el9_4 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
expat CVE-2024-45490 中危 2.5.0-1.el9 2.5.0-2.el9_4.1 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
expat CVE-2024-45491 中危 2.5.0-1.el9 2.5.0-2.el9_4.1 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
expat CVE-2024-45492 中危 2.5.0-1.el9 2.5.0-2.el9_4.1 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
gnutls CVE-2024-28834 中危 3.7.6-20.el9_2 3.8.3-4.el9_4 gnutls: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2024-03-21 14:15 修改: 2024-09-12 20:15
systemd-libs CVE-2023-7008 中危 252-13.el9_2 252-32.el9_4 systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
file-libs CVE-2022-48554 低危 5.39-12.el9 5.39-16.el9 file: stack-based buffer over-read in file_copystr in funcs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48554

镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051

发布日期: 2023-08-22 19:16 修改: 2024-03-13 22:15
usr/local/bin/tidb-admission-webhook (gobinary)
低危漏洞:0 中危漏洞:7 高危漏洞:2 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-24790 严重 1.21.10 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc CVE-2023-47108 高危 v0.35.0 0.46.0 opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2023-11-10 19:15 修改: 2023-11-20 19:34
stdlib CVE-2024-34156 高危 1.21.10 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
google.golang.org/protobuf CVE-2024-24786 中危 v1.31.0 1.33.0 golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-03-05 23:15 修改: 2024-06-10 18:15
golang.org/x/crypto CVE-2023-48795 中危 v0.16.0 0.17.0 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
golang.org/x/net CVE-2023-45288 中危 v0.19.0 0.23.0 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib CVE-2024-24789 中危 1.21.10 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib CVE-2024-24791 中危 1.21.10 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib CVE-2024-34155 中危 1.21.10 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib CVE-2024-34158 中危 1.21.10 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:fef8addb4d0d65bacc99206fec3da9f61fdc5ba2ec6e5c15afb83c59e45f6889

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
usr/local/bin/tidb-controller-manager (gobinary)
低危漏洞:0 中危漏洞:7 高危漏洞:2 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-24790 严重 1.21.10 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
github.com/dgrijalva/jwt-go CVE-2020-26160 高危 v3.2.0+incompatible jwt-go: access restriction bypass vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26160

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2020-09-30 18:15 修改: 2021-07-21 11:39
stdlib CVE-2024-34156 高危 1.21.10 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
google.golang.org/protobuf CVE-2024-24786 中危 v1.31.0 1.33.0 golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-03-05 23:15 修改: 2024-06-10 18:15
golang.org/x/crypto CVE-2023-48795 中危 v0.16.0 0.17.0 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
golang.org/x/net CVE-2023-45288 中危 v0.19.0 0.23.0 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib CVE-2024-24789 中危 1.21.10 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib CVE-2024-24791 中危 1.21.10 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib CVE-2024-34155 中危 1.21.10 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib CVE-2024-34158 中危 1.21.10 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:2c8e1dbed301749d431a62eb885375772d4f327d310b851524e912dfcb700290

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
usr/local/bin/tidb-discovery (gobinary)
低危漏洞:0 中危漏洞:6 高危漏洞:1 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-24790 严重 1.21.10 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib CVE-2024-34156 高危 1.21.10 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net CVE-2023-45288 中危 v0.19.0 0.23.0 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
google.golang.org/protobuf CVE-2024-24786 中危 v1.31.0 1.33.0 golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-03-05 23:15 修改: 2024-06-10 18:15
stdlib CVE-2024-24789 中危 1.21.10 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib CVE-2024-24791 中危 1.21.10 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib CVE-2024-34155 中危 1.21.10 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib CVE-2024-34158 中危 1.21.10 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:e8e774846a9c1803090efa0a682727e738b5169f6f3cb6c670f99fa3e3c88c97

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
usr/local/bin/tidb-scheduler (gobinary)
低危漏洞:0 中危漏洞:6 高危漏洞:1 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-24790 严重 1.21.10 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib CVE-2024-34156 高危 1.21.10 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net CVE-2023-45288 中危 v0.19.0 0.23.0 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
google.golang.org/protobuf CVE-2024-24786 中危 v1.31.0 1.33.0 golang-protobuf: encoding/protojson, internal/encoding/json: infinite loop in protojson.Unmarshal when unmarshaling certain forms of invalid JSON

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24786

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-03-05 23:15 修改: 2024-06-10 18:15
stdlib CVE-2024-24789 中危 1.21.10 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib CVE-2024-24791 中危 1.21.10 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib CVE-2024-34155 中危 1.21.10 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib CVE-2024-34158 中危 1.21.10 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:92f47956802c98842f9cab9c4373a9d6473ba18142ce4c7bbfecb0d8e62f5dae

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35