registry.k8s.io/kube-controller-manager:v1.28.14 linux/arm64

registry.k8s.io/kube-controller-manager:v1.28.14 - Trivy安全扫描结果 扫描时间: 2024-11-14 19:51 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:2 中危漏洞:5 高危漏洞:5 严重漏洞:0

系统OS: debian 12.6 扫描引擎: Trivy 扫描时间: 2024-11-14 19:51

registry.k8s.io/kube-controller-manager:v1.28.14 (debian 12.6) (debian)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
go-runner (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-34156 高危 1.22.6 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:6944677614f67d4cc3fd8414ebcf881085b0181735df57301bf1867a5126d669

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
stdlib CVE-2024-34155 中危 1.22.6 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:6944677614f67d4cc3fd8414ebcf881085b0181735df57301bf1867a5126d669

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib CVE-2024-34158 中危 1.22.6 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:6944677614f67d4cc3fd8414ebcf881085b0181735df57301bf1867a5126d669

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
usr/local/bin/kube-controller-manager (gobinary)
低危漏洞:2 中危漏洞:3 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/opencontainers/runc CVE-2024-21626 高危 v1.1.7 1.1.12 runc: file descriptor leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21626

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2024-01-31 22:15 修改: 2024-02-19 03:15
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc CVE-2023-47108 高危 v0.35.0 0.46.0 opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47108

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2023-11-10 19:15 修改: 2023-11-20 19:34
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp CVE-2023-45142 高危 v0.35.1 0.44.0 opentelemetry: DoS vulnerability in otelhttp

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45142

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2023-10-12 17:15 修改: 2024-02-19 03:15
stdlib CVE-2024-34156 高危 1.22.6 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
gopkg.in/square/go-jose.v2 CVE-2024-28180 中危 v2.6.0 jose-go: improper handling of highly compressed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28180

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2024-03-09 01:15 修改: 2024-06-12 02:15
stdlib CVE-2024-34155 中危 1.22.6 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35
stdlib CVE-2024-34158 中危 1.22.6 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
github.com/golang-jwt/jwt/v4 CVE-2024-51744 低危 v4.5.0 4.5.1 golang-jwt: Bad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-51744

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2024-11-04 22:15 修改: 2024-11-05 16:04
github.com/opencontainers/runc CVE-2024-45310 低危 v1.1.7 1.1.14, 1.2.0-rc.3 runc: runc can be tricked into creating empty files/directories on host

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45310

镜像层: sha256:e1094d776490ebf119a2a34e38cb0e7f54f65ef79a11e78737869b879fe7bf13

发布日期: 2024-09-03 19:15 修改: 2024-09-03 19:40