CVE-2022-3715 - HIGH severity - bash: a heap-buffer-overflow in valid_parameter_transform vulnerability in bash

CVE-2022-1304 - HIGH severity - e2fsprogs: out-of-bounds read/write via crafted filesystem vulnerability in e2fsprogs

CVE-2022-1304 - HIGH severity - e2fsprogs: out-of-bounds read/write via crafted filesystem vulnerability in libcom-err2

CVE-2019-8457 - CRITICAL severity - sqlite: heap out-of-bound read in function rtreenode() vulnerability in libdb5.3

CVE-2022-1304 - HIGH severity - e2fsprogs: out-of-bounds read/write via crafted filesystem vulnerability in libext2fs2

CVE-2021-33560 - HIGH severity - libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm vulnerability in libgcrypt20

CVE-2022-1304 - HIGH severity - e2fsprogs: out-of-bounds read/write via crafted filesystem vulnerability in libss2

CVE-2022-4899 - HIGH severity - zstd: mysql: buffer overrun in util.c vulnerability in libzstd1

CVE-2022-1304 - HIGH severity - e2fsprogs: out-of-bounds read/write via crafted filesystem vulnerability in logsave

CVE-2020-16156 - HIGH severity - perl-CPAN: Bypass of verification of signatures in CHECKSUMS files vulnerability in perl-base

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, docker/setup-qemu-action@v2, docker/setup-buildx-action@v2, docker/login-action@v2, docker/metadata-action@v4, crazy-max/ghaction-container-scan@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in gcc-10-base

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in gcc-9-base

CVE-2023-4806 - MEDIUM severity - glibc: potential use-after-free in getaddrinfo() vulnerability in libc-bin

CVE-2023-4813 - MEDIUM severity - glibc: potential use-after-free in gaih_inet() vulnerability in libc-bin

CVE-2023-4806 - MEDIUM severity - glibc: potential use-after-free in getaddrinfo() vulnerability in libc6

CVE-2023-4813 - MEDIUM severity - glibc: potential use-after-free in gaih_inet() vulnerability in libc6

CVE-2023-4039 - MEDIUM severity - gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 vulnerability in libgcc-s1

CVE-2024-2236 - MEDIUM severity - libgcrypt: vulnerable to Marvin Attack vulnerability in libgcrypt20

CVE-2024-26458 - MEDIUM severity - krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c vulnerability in libgssapi-krb5-2

CVE-2024-26461 - MEDIUM severity - krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c vulnerability in libgssapi-krb5-2

CVE-2011-3374 - LOW severity - It was found that apt-key in apt, all versions, do not correctly valid ... vulnerability in apt

TEMP-0841856-B18BAF - LOW severity - [Privilege escalation possible to other user than root] vulnerability in bash

CVE-2022-0563 - LOW severity - util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline vulnerability in bsdutils

CVE-2016-2781 - LOW severity - coreutils: Non-privileged session can escape to the parent session in chroot vulnerability in coreutils

CVE-2017-18018 - LOW severity - coreutils: race condition vulnerability in chown and chgrp vulnerability in coreutils

CVE-2022-3219 - LOW severity - gnupg: denial of service issue (resource consumption) using compressed packets vulnerability in gpgv

CVE-2011-3374 - LOW severity - It was found that apt-key in apt, all versions, do not correctly valid ... vulnerability in libapt-pkg6.0

CVE-2022-0563 - LOW severity - util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline vulnerability in libblkid1

CVE-2010-4756 - LOW severity - glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions vulnerability in libc-bin