Security Report: Image Vulnerabilities

[github-actions]

Last scan date

8/23/2024

Present Vulnerabilities

Vulnerability ID	PkgName	Title	Severity	Status	Fixed Version	Published Date	Affects	Links
CVE-2024-31080	xserver-common	xorg-x11-server: Heap buffer overread/data leakage in ProcXIGetSelectedEvents	HIGH	fixed	2:1.20.11-1+deb11u13	2024-04-04T14:15:10.33Z	e2e-test
CVE-2024-31081	xserver-common	xorg-x11-server: Heap buffer overread/data leakage in ProcXIPassiveGrabDevice	HIGH	fixed	2:1.20.11-1+deb11u13	2024-04-04T14:15:10.593Z	e2e-test
CVE-2024-31083	xserver-common	xorg-x11-server: User-after-free in ProcRenderAddGlyphs	HIGH	fixed	2:1.20.11-1+deb11u13	2024-04-05T12:15:37.577Z	e2e-test
CVE-2024-2961	libc-bin	glibc: Out of bounds write in iconv may lead to remote code execution	HIGH	fixed	2.36-9+deb12u6	2024-04-17T18:15:15.833Z	e2e-test e2e-test
CVE-2024-33599	libc-bin	glibc: stack-based buffer overflow in netgroup cache	HIGH	fixed	2.36-9+deb12u7	-	e2e-test e2e-test
CVE-2024-2398	curl	curl: HTTP/2 push headers memory-leak	HIGH	fixed	7.88.1-10+deb12u6	2024-03-27T08:15:41.283Z	e2e-test
CVE-2022-48622	libgdk-pixbuf-2.0-0	gnome: heap memory corruption on gdk-pixbuf	HIGH	fixed	2.42.2+dfsg-1+deb11u2	2024-01-26T09:15:07.57Z	e2e-test e2e-test
CVE-2024-0553	libgnutls30	gnutls: incomplete fix for CVE-2023-5981	HIGH	fixed	3.7.1-5+deb11u5	2024-01-16T12:15:45.557Z	e2e-test
CVE-2024-0567	libgnutls30	gnutls: rejects certificate chain with distributed trust	HIGH	fixed	3.7.1-5+deb11u5	2024-01-16T14:15:48.527Z	e2e-test
CVE-2020-22218	libssh2-1	libssh2: use-of-uninitialized-value in _libssh2_transport_read	HIGH	fixed	1.9.0-2+deb11u1	2023-08-22T19:16:19.12Z	e2e-test
CVE-2024-37370	libgssapi-krb5-2	krb5: GSS message token handling	HIGH	fixed	1.18.3-6+deb11u5	2024-06-28T22:15:02.293Z	e2e-test e2e-test e2e-test e2e-test