Docker fluent/fluentd:v1.10.3-1.0

Vulnerabilities

 1 via 2 paths

Dependencies

 27

Source

 Group 6 Copy Created with Sketch. Docker

Target OS

 alpine:3.9.6
Test your Docker Hub image against our market leading vulnerability database Sign up for free
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity

Out-of-bounds Write

  • Vulnerable module: musl/musl
  • Introduced through: musl/musl@1.1.20-r5 and musl/musl-utils@1.1.20-r5
  • Fixed in: 1.1.20-r6

Detailed paths

  • Introduced through: fluent/fluentd:v1.10.3-1.0@* › musl/musl@1.1.20-r5
  • Introduced through: fluent/fluentd:v1.10.3-1.0@* › musl/musl-utils@1.1.20-r5

Overview

Affected versions of this package are vulnerable to Out-of-bounds Write. In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).

Remediation

Upgrade musl to version or higher.

References

Out-of-bounds Write vulnerability report