Findings for Container Security, Critical, [TheRedHatter/javagoof:Dockerfile]:Double Free
Created by: armorcodegithubpreprod[bot]
Findings for Container Security, Critical, [TheRedHatter/javagoof:Dockerfile]:Double Free
Component Details
- Exploit Maturity: no-known-exploit
- Vulnerable Package: -
- Current Version: -
- Vulnerable Version(s): ><7.52.1-5+deb9u10
- Vulnerable Path: >null
NVD Description
Note:
Versions mentioned in the description apply to the upstream curl package.
See How to fix? for Debian:9 relevant versions.
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.
References
- ADVISORY
- BUGTRAQ
- CONFIRM
- CONFIRM
- DEBIAN
- Debian Security Tracker
- FEDORA
- Fedora Security Update
- Fedora Security Update
- GENTOO
- MISC
- MISC
- N/A
- OpenSuse Security Announcement
- OpenSuse Security Announcement
- Ubuntu CVE Tracker
Origin : null Type : null Image Id : null
Snyk Project Status: Active
Component Details
- Exploit Maturity: no-known-exploit
- Vulnerable Package: -
- Current Version: -
- Vulnerable Version(s): ><57.1-6+deb9u1
- Vulnerable Path: >null
NVD Description
Note:
Versions mentioned in the description apply to the upstream icu package.
See How to fix? for Debian:9 relevant versions.
Double free in i18n/zonemeta.cpp in International Components for Unicode (ICU) for C/C++ through 59.1 allows remote attackers to execute arbitrary code via a crafted string, aka a "redundant UVector entry clean up function call" issue.
References
Origin : null Type : null Image Id : null
Snyk Project Status: Active
Component Details
- Exploit Maturity: no-known-exploit
- Vulnerable Package: -
- Current Version: -
- Vulnerable Version(s): ><0.168-1+deb9u1
- Vulnerable Path: >null
NVD Description
Note:
Versions mentioned in the description apply to the upstream elfutils package.
See How to fix? for Debian:9 relevant versions.
libelf/elf_end.c in elfutils 0.173 allows remote attackers to cause a denial of service (double free and application crash) or possibly have unspecified other impact because it tries to decompress twice.
References
Origin : null Type : null Image Id : null
Snyk Project Status: Active