registry.k8s.io/kube-controller-manager:v1.28.10 linux/arm64

registry.k8s.io/kube-controller-manager:v1.28.10 - Trivy安全扫描结果扫描时间: 2024-11-28 14:36 温馨提示: 这是一个 linux/arm64 系统架构镜像

全部漏洞信息

低危漏洞:2

中危漏洞:11

高危漏洞:3

严重漏洞:2

系统OS: debian 11.9 扫描引擎: Trivy 扫描时间: 2024-11-28 14:36

registry.k8s.io/kube-controller-manager:v1.28.10 (debian 11.9) (debian)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息

go-runner (gobinary)

低危漏洞:0

中危漏洞:5

高危漏洞:0

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:9ff00014700c13e95fe1cfc5602726275da9ee60f08a561b5e202e74fc553c7f 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:9ff00014700c13e95fe1cfc5602726275da9ee60f08a561b5e202e74fc553c7f 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:9ff00014700c13e95fe1cfc5602726275da9ee60f08a561b5e202e74fc553c7f 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:9ff00014700c13e95fe1cfc5602726275da9ee60f08a561b5e202e74fc553c7f 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:9ff00014700c13e95fe1cfc5602726275da9ee60f08a561b5e202e74fc553c7f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:9ff00014700c13e95fe1cfc5602726275da9ee60f08a561b5e202e74fc553c7f 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/bin/kube-controller-manager (gobinary)

低危漏洞:2

中危漏洞:6

高危漏洞:3

严重漏洞:1

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2024-24790	严重	1.21.9	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	CVE-2023-47108	高危	v0.35.0	0.46.0	opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2023-11-10 19:15 修改: 2023-11-20 19:34
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	CVE-2023-45142	高危	v0.35.1	0.44.0	opentelemetry: DoS vulnerability in otelhttp 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
github.com/opencontainers/runc	CVE-2024-21626	高危	v1.1.7	1.1.12	runc: file descriptor leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21626 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-01-31 22:15 修改: 2024-02-19 03:15
gopkg.in/square/go-jose.v2	CVE-2024-28180	中危	v2.6.0		jose-go: improper handling of highly compressed data 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28180 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-03-09 01:15 修改: 2024-06-12 02:15
stdlib	CVE-2024-24789	中危	1.21.9	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.21.9	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.21.9	1.22.7, 1.23.1	Calling any of the Parse functions on Go source code which contains de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib	CVE-2024-34156	中危	1.21.9	1.22.7, 1.23.1	Calling Decoder.Decode on a message which contains deeply nested struc ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib	CVE-2024-34158	中危	1.21.9	1.22.7, 1.23.1	Calling Parse on a "// +build" build tag line with deeply nested expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/opencontainers/runc	CVE-2024-45310	低危	v1.1.7	1.1.14, 1.2.0-rc.3	runc: runc can be tricked into creating empty files/directories on host 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45310 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-09-03 19:15 修改: 2024-09-03 19:40
github.com/golang-jwt/jwt/v4	CVE-2024-51744	低危	v4.5.0	4.5.1	golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744 镜像层: sha256:e12322fb39a563705da83d334a5d236d6cfc48652459018f914dc00d4025c339 发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04