logstash/logstash-oss:8.6.2-arm64

Size
420.40 MB
Architecture
arm64
Created
2023-02-12
Pull command
docker pull container-registry-test.elastic.co/logstash/logstash-oss:8.6.2-arm64

Vulnerability report

Critical

0

High

0

Medium

4

Low

1

Negligible

1

Unknown

0

Medium

CVEPackageVersionDescription
CVE-2022-4415systemd245.4-4ubuntu3.19A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.
CVE-2021-36222krb51.17-6ubuntu4.2ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in a certain situation.
CVE-2023-0361gnutls283.6.13-2ubuntu1.7A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
CVE-2022-48303tar1.30+dfsg-7ubuntu0.20.04.2GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.

Low

CVEPackageVersionDescription
CVE-2016-2781coreutils8.30-3ubuntu2chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via a crafted TIOCSTI ioctl call, which pushes characters to the terminal's input buffer.

Negligible

CVEPackageVersionDescription
CVE-2021-39537ncurses6.2-0ubuntu2An issue was discovered in ncurses through v6.2-1. _nc_captoinfo in captoinfo.c has a heap-based buffer overflow.