docker.io/timberio/vector:0.33.0-distroless-libc linux/arm64

docker.io/timberio/vector:0.33.0-distroless-libc - Trivy安全扫描结果 扫描时间: 2024-11-05 12:40 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:14 中危漏洞:17 高危漏洞:3 严重漏洞:0

系统OS: debian 11.7 扫描引擎: Trivy 扫描时间: 2024-11-05 12:40

docker.io/timberio/vector:0.33.0-distroless-libc (debian 11.7) (debian)
低危漏洞:14 中危漏洞:17 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libc6 CVE-2023-4911 高危 2.31-13+deb11u6 2.31-13+deb11u7 glibc: buffer overflow in ld.so leading to privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2023-10-03 18:15 修改: 2024-09-17 19:46

libc6 CVE-2024-2961 高危 2.31-13+deb11u6 2.31-13+deb11u9 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2024-04-17 18:15 修改: 2024-07-22 18:15

libc6 CVE-2024-33599 高危 2.31-13+deb11u6 2.31-13+deb11u10 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15

libc6 CVE-2023-4806 中危 2.31-13+deb11u6 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15

libc6 CVE-2023-4813 中危 2.31-13+deb11u6 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15

libc6 CVE-2024-33600 中危 2.31-13+deb11u6 2.31-13+deb11u10 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15

libc6 CVE-2024-33601 中危 2.31-13+deb11u6 2.31-13+deb11u10 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15

libc6 CVE-2024-33602 中危 2.31-13+deb11u6 2.31-13+deb11u10 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2024-05-06 20:15 修改: 2024-07-22 18:15

libssl1.1 CVE-2023-3446 中危 1.1.1n-0+deb11u5 1.1.1v-0~deb11u1 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15

libssl1.1 CVE-2023-3817 中危 1.1.1n-0+deb11u5 1.1.1v-0~deb11u1 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15

libssl1.1 CVE-2023-5678 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15

libssl1.1 CVE-2024-0727 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15

libssl1.1 CVE-2024-4741 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libssl1.1 CVE-2024-5535 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15

openssl CVE-2023-3446 中危 1.1.1n-0+deb11u5 1.1.1v-0~deb11u1 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15

openssl CVE-2023-3817 中危 1.1.1n-0+deb11u5 1.1.1v-0~deb11u1 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15

openssl CVE-2023-5678 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15

openssl CVE-2024-0727 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15

openssl CVE-2024-4741 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

openssl CVE-2024-5535 中危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15

libc6 CVE-2019-1010023 低危 2.31-13+deb11u6 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc6 CVE-2019-1010024 低危 2.31-13+deb11u6 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc6 CVE-2019-1010025 低危 2.31-13+deb11u6 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libssl1.1 CVE-2024-2511 低危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15

libssl1.1 CVE-2024-9143 低危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53

libstdc++6 CVE-2023-4039 低危 10.2.1-6 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:572cb677bd99eccfebebc4e032511af308fb987babb6ac51b1bbf7330b78d94f

发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15

libc6 CVE-2019-9192 低危 2.31-13+deb11u6 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15

libgcc-s1 CVE-2023-4039 低危 10.2.1-6 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:af4a7a6dcc3f7b42f75caf9defb6dbd38e758b8ee0f13d0f0f4f751106b54832

发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15

libgomp1 CVE-2023-4039 低危 10.2.1-6 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:5d26b357c18f83803dc5e5f097412051f0e9489531cbcfe88138baea15f1d7a5

发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15

libc6 CVE-2010-4756 低危 2.31-13+deb11u6 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15

libc6 CVE-2018-20796 低危 2.31-13+deb11u6 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56

libc6 CVE-2019-1010022 低危 2.31-13+deb11u6 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:7b1fb7e71a5526362ffc18584a80a3ce46e3d0a0c5d4a4f388f5eae345cee692

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

openssl CVE-2024-2511 低危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15

openssl CVE-2024-9143 低危 1.1.1n-0+deb11u5 1.1.1n-0+deb11u6 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53

libssl1.1 DLA-3942-2 未知 1.1.1n-0+deb11u5 1.1.1w-0+deb11u2 openssl - regression update

漏洞详情:

镜像层: sha256:990271342518f9e64c2403a07d928eb42d8676831ee8fd1b3dc3b62da7a1d162

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

openssl DLA-3942-2 未知 1.1.1n-0+deb11u5 1.1.1w-0+deb11u2 openssl - regression update

漏洞详情:

镜像层: sha256:3a8250aec45920023b976f34f260e7c4497e2ca3040c80103372808a021bf97c

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00