ABCDEFGHIJKLMNOPQRSTUVWXYZ
1
TwistlockClairAnchore EngineAqua MicroscannerDagda
2
Image ID CVE Package Version Severity StatusUnapproved Unknown CVE-2018-14618 curl 7.61.0-r0 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618CVE-2018-14618 curl-7.61.0-r0 Unknown 7.61.1-r0 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618{[
3
----- -- --- ------- ------- -------- ------CVE-2018-14618 libcurl-7.61.0-r0 Unknown 7.61.1-r0 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14618scan_started: {{
4
docker.io/library/image-kong:latest fd444f66ec18a5f8 CVE-2016-8610 openssl 1.0.2o-r1 highseconds: 1538551399,id: "5bb1bf4a586b2200017c0ab3",
5
docker.io/library/image-kong:latest fd444f66ec18a5f8 CVE-2015-9261 busybox 1.26.2-r11 medium fixed in 1.27.2-r11nanos: 527330949image_name: "kong",
6
docker.io/library/image-kong:latest fd444f66ec18a5f8 CVE-2016-7055 openssl 1.0.2o-r1 medium},static_analysis: {
7
Vulnerability threshold check results: FAILscan_duration: 2,malware_binaries: [],
8
digest: "1a7153cd8c58404b75ffad20d98ac6c3419cb40cd564718341f0b78b3214a67d",os_packages: {
9
Compliancemetadata: {ok_os_packages: 23,
10
----------container_config: {},os_packages_details: [
11
Image ID Severity Descriptionconfig: {}{
12
----- -- -------- -----------},is_false_positive: false,
13
docker.io/library/image-kong:latest fd444f66ec18a5f8 high Image should be created with a useros: "alpine",is_vulnerable: false,
14
version: "3.6.3",product: "musl",
15
resources: [version: "1.1.16",
16
{vulnerabilities: []
17
resource: {},
18
format: "apk",{
19
name: "musl",is_false_positive: false,
20
version: "1.1.16-r14",is_vulnerable: true,
21
arch: "x86_64",product: "busybox",
22
cpe: "pkg:/alpine:3.6.3:musl:1.1.16-r14",version: "1.26.2",
23
license: "MIT",vulnerabilities: [
24
name_hash: "e6a295ffc4b56faeb936c5ed9b621796"{
25
},CVE-2015-9261: {
26
scanned: truecveid: "CVE-2015-9261",
27
},cvss_access_complexity: "Medium",
28
{cvss_access_vector: "Network",
29
resource: {cvss_authentication: "None required",
30
format: "apk",cvss_availability_impact: "Partial",
31
name: "busybox",cvss_base: 4.3,
32
Test Imagehttps://github.com/Kong/docker-kong/blob/e30f249b206f2cbcda1eee603390436ae00010b3/alpine/Dockerfileversion: "1.26.2-r11",cvss_confidentiality_impact: "None",
33
arch: "x86_64",cvss_exploit: 8.6,
34
cpe: "pkg:/alpine:3.6.3:busybox:1.26.2-r11",cvss_impact: 2.9,
35
license: "GPL2",cvss_integrity_impact: "None",
36
name_hash: "1a0be787cebd01a5ca5d163e1502c1c6"cvss_vector: [
37
},AV:N,
38
scanned: true,AC:M,
39
vulnerabilities: [Au:N,
40
{C:N,
41
name: "CVE-2015-9261",I:N,
42
description: "huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file.",A:P
43
nvd_score: 4.3,],
44
nvd_score_version: "CVSS v2",cweid: "CWE-476",
45
nvd_vectors: "AV:N/AC:M/Au:N/C:N/I:N/A:P",mod_date: "24-09-2018",
46
nvd_severity: "medium",pub_date: "26-07-2018",
47
nvd_url: "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-9261",summary: "huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer, causing segfaults and an application crash during an unzip operation on a specially crafted ZIP file."
48
vendor_score: 4.3,}
49
vendor_score_version: "CVSS v2",}
50
vendor_vectors: "AV:N/AC:M/Au:N/C:N/I:N/A:P",]
51
vendor_severity: "medium",},
52
publish_date: "2018-07-26",{
53
modification_date: "2018-09-24",is_false_positive: false,
54
nvd_score_v3: 5.5,is_vulnerable: false,
55
nvd_vectors_v3: "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",product: "alpine-baselayout",
56
nvd_severity_v3: "medium"version: "3.0.4",
57
}vulnerabilities: []
58
]},
59
},{
60
{is_false_positive: false,
61
resource: {is_vulnerable: false,
62
format: "apk",product: "alpine-keys",
63
name: "alpine-baselayout",version: "2.1",
64
version: "3.0.4-r0",vulnerabilities: []
65
arch: "x86_64",},
66
cpe: "pkg:/alpine:3.6.3:alpine-baselayout:3.0.4-r0",{
67
license: "GPL2",is_false_positive: false,
68
name_hash: "0316409a5019da26c343d407d1c7b0fb"is_vulnerable: false,
69
},product: "libressl2.5-libcrypto",
70
scanned: trueversion: "2.5.5",
71
},vulnerabilities: []
72
{},
73
resource: {{
74
format: "apk",is_false_positive: false,
75
name: "alpine-keys",is_vulnerable: false,
76
version: "2.1-r1",product: "libressl2.5-libssl",
77
arch: "x86_64",version: "2.5.5",
78
cpe: "pkg:/alpine:3.6.3:alpine-keys:2.1-r1",vulnerabilities: []
79
license: "MIT",},
80
name_hash: "15e58036e489dbb2e315895941442f71"{
81
},is_false_positive: false,
82
scanned: trueis_vulnerable: false,
83
},product: "libressl2.5-libtls",
84
{version: "2.5.5",
85
resource: {vulnerabilities: []
86
format: "apk",},
87
name: "libressl2.5-libcrypto",{
88
version: "2.5.5-r2",is_false_positive: false,
89
arch: "x86_64",is_vulnerable: false,
90
cpe: "pkg:/alpine:3.6.3:libressl2.5-libcrypto:2.5.5-r2",product: "ssl_client",
91
license: "custom",version: "1.26.2",
92
name_hash: "c0c60b126dd08f23d05491df9d1a5c8b"vulnerabilities: []
93
},},
94
scanned: true{
95
},is_false_positive: false,
96
{is_vulnerable: false,
97
resource: {product: "zlib",
98
format: "apk",version: "1.2.11",
99
name: "libressl2.5-libssl",vulnerabilities: []
100
version: "2.5.5-r2",},