docker.io/rancher/hardened-etcd:v3.5.16-k3s1-build20241106

全部漏洞信息

低危漏洞:2

中危漏洞:0

高危漏洞:2

严重漏洞:2

系统OS: 扫描引擎: Trivy 扫描时间: 2025-01-30 01:32

usr/local/bin/etcd (gobinary)

低危漏洞:1

中危漏洞:0

高危漏洞:1

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2024-45337	严重	v0.21.0	0.31.0	golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337 镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1 发布日期: 2024-12-12 02:02 修改: 2024-12-12 21:15
golang.org/x/net	CVE-2024-45338	高危	v0.23.0	0.33.0	golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338 镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1 发布日期: 2024-12-18 21:15 修改: 2024-12-31 20:16
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.4.2	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

golang.org/x/crypto

CVE-2024-45337

严重

v0.21.0

0.31.0

golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337

镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1

发布日期: 2024-12-12 02:02 修改: 2024-12-12 21:15

golang.org/x/net

CVE-2024-45338

高危

v0.23.0

0.33.0

golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338

镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1

发布日期: 2024-12-18 21:15 修改: 2024-12-31 20:16

github.com/golang-jwt/jwt/v4

CVE-2024-51744

低危

v4.4.2

4.5.1

golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744

镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1

发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

usr/local/bin/etcdctl (gobinary)

低危漏洞:1

中危漏洞:0

高危漏洞:1

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
golang.org/x/crypto	CVE-2024-45337	严重	v0.21.0	0.31.0	golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45337 镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1 发布日期: 2024-12-12 02:02 修改: 2024-12-12 21:15
golang.org/x/net	CVE-2024-45338	高危	v0.23.0	0.33.0	golang.org/x/net/html: Non-linear parsing of case-insensitive content in golang.org/x/net/html 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45338 镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1 发布日期: 2024-12-18 21:15 修改: 2024-12-31 20:16
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.4.2	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:a2c6766621fbff6706a6b0c1ef18e5a05b3e0e6edb5f9960e714fda74bcff2f1 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04

软件包

漏洞

安全状态

安装版本

修复版本

漏洞信息

golang.org/x/crypto

CVE-2024-45337

严重

v0.21.0

0.31.0

golang.org/x/crypto/ssh: Misuse of ServerConfig.PublicKeyCallback may cause authorization bypass in golang.org/x/crypto