Skip to content

Instantly share code, notes, and snippets.

@omerlh
Created April 27, 2021 08:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save omerlh/94950633c114790357bb6e71e2a09ed7 to your computer and use it in GitHub Desktop.
Save omerlh/94950633c114790357bb6e71e2a09ed7 to your computer and use it in GitHub Desktop.
cloud sql scan results
Testing gcr.io/cloudsql-docker/gce-proxy:1.22.0...
✗ Low severity vulnerability found in openssl/libssl1.1
Description: Cryptographic Issues
Info: https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-374709
Introduced through: openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: openssl/libssl1.1@1.1.1d-0+deb10u6
From: openssl@1.1.1d-0+deb10u6 > openssl/libssl1.1@1.1.1d-0+deb10u6
From: openssl@1.1.1d-0+deb10u6
✗ Low severity vulnerability found in openssl/libssl1.1
Description: Cryptographic Issues
Info: https://snyk.io/vuln/SNYK-DEBIAN10-OPENSSL-374996
Introduced through: openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: openssl/libssl1.1@1.1.1d-0+deb10u6
From: openssl@1.1.1d-0+deb10u6 > openssl/libssl1.1@1.1.1d-0+deb10u6
From: openssl@1.1.1d-0+deb10u6
✗ Low severity vulnerability found in glibc/libc6
Description: Double Free
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-1078993
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Uncontrolled Recursion
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-338106
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Uncontrolled Recursion
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-338163
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Improper Input Validation
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-356371
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Resource Management Errors
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-356671
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Resource Management Errors
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-356735
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: CVE-2010-4051
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-356875
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Out-of-Bounds
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-452228
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Access Restriction Bypass
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-452267
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Use of Insufficiently Random Values
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-453375
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Information Exposure
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-453640
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Information Exposure
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-534995
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Low severity vulnerability found in glibc/libc6
Description: Integer Underflow
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-564233
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Medium severity vulnerability found in glibc/libc6
Description: Loop with Unreachable Exit Condition ('Infinite Loop')
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-1035462
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Medium severity vulnerability found in glibc/libc6
Description: Out-of-bounds Read
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-1055403
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ Medium severity vulnerability found in glibc/libc6
Description: Out-of-Bounds
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-559181
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ High severity vulnerability found in glibc/libc6
Description: Reachable Assertion
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-1065768
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ High severity vulnerability found in glibc/libc6
Description: Out-of-bounds Write
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-559488
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
✗ High severity vulnerability found in glibc/libc6
Description: Use After Free
Info: https://snyk.io/vuln/SNYK-DEBIAN10-GLIBC-559493
Introduced through: glibc/libc6@2.28-10, openssl/libssl1.1@1.1.1d-0+deb10u6, openssl@1.1.1d-0+deb10u6
From: glibc/libc6@2.28-10
From: openssl/libssl1.1@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
From: openssl@1.1.1d-0+deb10u6 > glibc/libc6@2.28-10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment