Unpacked Filesystem

    2. 2021-03-08T05:22:26.380Z        INFO    Downloading DB...
    3. 20.37 MiB / 20.37 MiB [-------------------------------------------------------------------------------------------------------------------------------------] 100.00% 8.24 MiB p/s 2s
    4. 2021-03-08T05:22:30.134Z        INFO    Detecting Alpine vulnerabilities...
    6. /tmp/rootfs (alpine 3.10.2)
    7. ===========================
    8. Total: 20 (UNKNOWN: 0, LOW: 2, MEDIUM: 10, HIGH: 8, CRITICAL: 0)
    10. +--------------+------------------+----------+-------------------+---------------+---------------------------------------+
    11. |   LIBRARY    | VULNERABILITY ID | SEVERITY | INSTALLED VERSION | FIXED VERSION |                 TITLE                 |
    12. +--------------+------------------+----------+-------------------+---------------+---------------------------------------+
    13. | libcrypto1.1 | CVE-2020-1967    | HIGH     | 1.1.1c-r0         | 1.1.1g-r0     | openssl: Segmentation                 |
    14. |              |                  |          |                   |               | fault in SSL_check_chain              |
    15. |              |                  |          |                   |               | causes denial of service              |
    16. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2020-1967  |
    17. +              +------------------+          +                   +---------------+---------------------------------------+
    18. |              | CVE-2021-23839   |          |                   | 1.1.1j-r0     | openssl: incorrect SSLv2              |
    19. |              |                  |          |                   |               | rollback protection                   |
    20. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2021-23839 |
    21. +              +------------------+          +                   +               +---------------------------------------+
    22. |              | CVE-2021-23840   |          |                   |               | openssl: integer                      |
    23. |              |                  |          |                   |               | overflow in CipherUpdate              |
    24. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2021-23840 |
    25. +              +------------------+          +                   +               +---------------------------------------+
    26. |              | CVE-2021-23841   |          |                   |               | openssl: NULL pointer dereference     |
    27. |              |                  |          |                   |               | in X509_issuer_and_serial_hash()      |
    28. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2021-23841 |
    29. +              +------------------+----------+                   +---------------+---------------------------------------+
    30. |              | CVE-2019-1547    | MEDIUM   |                   | 1.1.1d-r0     | openssl: side-channel weak            |
    31. |              |                  |          |                   |               | encryption vulnerability              |
    32. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1547  |
    33. |              | CVE-2019-1549    |          |                   |               | openssl: information                  |
    34. |              |                  |          |                   |               | disclosure in fork()                  |
    35. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1549  |
    36. +              +------------------+          +                   +---------------+---------------------------------------+
    37. |              | CVE-2019-1551    |          |                   | 1.1.1d-r2     | openssl: Integer overflow in RSAZ     |
    38. |              |                  |          |                   |               | modular exponentiation on x86_64      |
    39. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1551  |
    40. +              +------------------+          +                   +---------------+---------------------------------------+
    41. |              | CVE-2020-1971    |          |                   | 1.1.1i-r0     | openssl: EDIPARTYNAME                 |
    42. |              |                  |          |                   |               | NULL pointer de-reference             |
    43. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2020-1971  |
    44. +              +------------------+----------+                   +---------------+---------------------------------------+
    45. |              | CVE-2019-1563    | LOW      |                   | 1.1.1d-r0     | openssl: information                  |
    46. |              |                  |          |                   |               | disclosure in PKCS7_dataDecode        |
    47. |              |                  |          |                   |               | and CMS_decrypt_set1_pkey             |
    48. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1563  |
    49. +--------------+------------------+----------+                   +---------------+---------------------------------------+
    50. | libssl1.1    | CVE-2020-1967    | HIGH     |                   | 1.1.1g-r0     | openssl: Segmentation                 |
    51. |              |                  |          |                   |               | fault in SSL_check_chain              |
    52. |              |                  |          |                   |               | causes denial of service              |
    53. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2020-1967  |
    54. +              +------------------+          +                   +---------------+---------------------------------------+
    55. |              | CVE-2021-23839   |          |                   | 1.1.1j-r0     | openssl: incorrect SSLv2              |
    56. |              |                  |          |                   |               | rollback protection                   |
    57. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2021-23839 |
    58. +              +------------------+          +                   +               +---------------------------------------+
    59. |              | CVE-2021-23840   |          |                   |               | openssl: integer                      |
    60. |              |                  |          |                   |               | overflow in CipherUpdate              |
    61. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2021-23840 |
    62. +              +------------------+          +                   +               +---------------------------------------+
    63. |              | CVE-2021-23841   |          |                   |               | openssl: NULL pointer dereference     |
    65. +              +------------------+----------+                   +---------------+---------------------------------------+
    66. |              | CVE-2019-1547    | MEDIUM   |                   | 1.1.1d-r0     | openssl: side-channel weak            |
    67. |              |                  |          |                   |               | encryption vulnerability              |
    68. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1547  |
    69. +              +------------------+          +                   +               +---------------------------------------+
    70. |              | CVE-2019-1549    |          |                   |               | openssl: information                  |
    71. |              |                  |          |                   |               | disclosure in fork()                  |
    72. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1549  |
    73. +              +------------------+          +                   +---------------+---------------------------------------+
    74. |              | CVE-2019-1551    |          |                   | 1.1.1d-r2     | openssl: Integer overflow in RSAZ     |
    75. |              |                  |          |                   |               | modular exponentiation on x86_64      |
    76. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1551  |
    77. +              +------------------+          +                   +---------------+---------------------------------------+
    78. |              | CVE-2020-1971    |          |                   | 1.1.1i-r0     | openssl: EDIPARTYNAME                 |
    79. |              |                  |          |                   |               | NULL pointer de-reference             |
    80. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2020-1971  |
    81. +              +------------------+----------+                   +---------------+---------------------------------------+
    82. |              | CVE-2019-1563    | LOW      |                   | 1.1.1d-r0     | openssl: information                  |
    83. |              |                  |          |                   |               | disclosure in PKCS7_dataDecode        |
    84. |              |                  |          |                   |               | and CMS_decrypt_set1_pkey             |
    85. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2019-1563  |
    86. +--------------+------------------+----------+-------------------+---------------+---------------------------------------+
    87. | musl         | CVE-2020-28928   | MEDIUM   | 1.1.22-r3         | 1.1.22-r4     | In musl libc through 1.2.1,           |
    88. |              |                  |          |                   |               | wcsnrtombs mishandles particular      |
    89. |              |                  |          |                   |               | combinations of destination buffer... |
    90. |              |                  |          |                   |               | -->avd.aquasec.com/nvd/cve-2020-28928 |
    91. +--------------+                  +          +                   +               +                                       +
    92. | musl-utils   |                  |          |                   |               |                                       |
    93. |              |                  |          |                   |               |                                       |
    94. |              |                  |          |                   |               |                                       |
    96. +--------------+------------------+----------+-------------------+---------------+---------------------------------------+