Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Apiiro] Container Security Findings - Critical Severity · Critical Risk #125

Open
apiiro-staging bot opened this issue Jun 20, 2024 · 0 comments
Open

[Apiiro] Container Security Findings - Critical Severity · Critical Risk #125

apiiro-staging bot opened this issue Jun 20, 2024 · 0 comments

Comments

@apiiro-staging
Copy link

Discovered on: Jun 19, 2024 19:25

Finding details:
Finding name: Integer Overflow or Wraparound
Severity: Critical
Sources: Snyk Container

About this vulnerability:
Identifiers:
- CVE-2023-45853
- SNYK-DEBIAN12-ZLIB-6008963-VendorSpecific

CVSS v3.0: 9.8
CWE links:
- CWE-190

Exploit maturity: No exploit maturity data
Introduced through:

  • zlib/zlib1g: 1:1.2.13.dfsg-1
  • util-linux/util-linux: 2.38.1-5+b1 > zlib/zlib1g: 1:1.2.13.dfsg-1
  • apt: 2.6.1 > apt/libapt-pkg6.0: 2.6.1 > zlib/zlib1g: 1:1.2.13.dfsg-1
  • apt: 2.6.1 > gnupg2/gpgv: 2.2.40-1.1 > zlib/zlib1g: 1:1.2.13.dfsg-1
  • dash: 0.5.12-2 > dpkg: 1.21.22 > zlib/zlib1g: 1:1.2.13.dfsg-1

Affected assets:
Dependency: zlib/zlib1g: 1:1.2.13.dfsg-1
Container image: neritest/gooddebian
Image digests: 7c288032ecf3319045d9fa538c3b0cc868a320d01d03bce15b99c2c336319994
View in Apiiro
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
0 participants