Scheduled CVE vulnerability scan of published images. #33

Annotations

10 errors, 12 warnings, and 10 notices

CVE-2024-2398 - HIGH severity - curl: HTTP/2 push headers memory-leak vulnerability in curl

CVE-2022-48622 - HIGH severity - gnome: heap memory corruption on gdk-pixbuf vulnerability in gir1.2-gdkpixbuf-2.0

CVE-2024-32002 - CRITICAL severity - git: Recursive clones RCE vulnerability in git

CVE-2023-25652 - HIGH severity - git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents vulnerability in git

CVE-2023-29007 - HIGH severity - git: arbitrary configuration injection when renaming or deleting a section from a configuration file vulnerability in git

CVE-2024-32004 - HIGH severity - git: RCE while cloning local repos vulnerability in git

CVE-2024-32465 - HIGH severity - git: additional local RCE vulnerability in git

CVE-2024-32002 - CRITICAL severity - git: Recursive clones RCE vulnerability in git-man

CVE-2023-29007 - HIGH severity - git: arbitrary configuration injection when renaming or deleting a section from a configuration file vulnerability in git-man

The following actions use a deprecated Node.js version and will be forced to run on node20: github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in cpp-12

CVE-2024-2004 - MEDIUM severity - curl: Usage of disabled protocol vulnerability in curl

CVE-2024-7264 - MEDIUM severity - curl: libcurl: ASN.1 date parser overread vulnerability in curl

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in g++-12

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in gcc-12

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in gcc-12-base

CVE-2024-26458 - MEDIUM severity - krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c vulnerability in krb5-multidev

CVE-2024-26461 - MEDIUM severity - krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c vulnerability in krb5-multidev

CVE-2023-49582 - MEDIUM severity - APR: Lax permissions in Apache Portable Runtime shared memory vulnerability in libapr1

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in libasan8

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/

CVE-2011-3374 - LOW severity - It was found that apt-key in apt, all versions, do not correctly valid ... vulnerability in apt

TEMP-0841856-B18BAF - LOW severity - [Privilege escalation possible to other user than root] vulnerability in bash

CVE-2017-13716 - LOW severity - binutils: Memory leak with the C++ symbol demangler routine in libiberty vulnerability in binutils

CVE-2018-18483 - LOW severity - binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service vulnerability in binutils

CVE-2018-20673 - LOW severity - libiberty: Integer overflow in demangle_template() function vulnerability in binutils

CVE-2018-20712 - LOW severity - libiberty: heap-based buffer over-read in d_expression_1 vulnerability in binutils

CVE-2018-9996 - LOW severity - binutils: Stack-overflow in libiberty/cplus-dem.c causes crash vulnerability in binutils

CVE-2021-32256 - LOW severity - binutils: stack-overflow issue in demangle_type in rust-demangle.c. vulnerability in binutils

CVE-2023-1972 - LOW severity - binutils: Illegal memory access when accessing a zer0-lengthverdef table vulnerability in binutils

CVE-2017-13716 - LOW severity - binutils: Memory leak with the C++ symbol demangler routine in libiberty vulnerability in binutils-common

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Scheduled CVE vulnerability scan of published images. #33

vulnerability-scan-schedule (awx-ee)

Scheduled CVE vulnerability scan of published images. #33

Jobs

Run details

Annotations

This job succeeded

Re-running jobs...