Docker golang:alpine

Vulnerabilities

1 via 2 paths

Dependencies

15

Source

Group 6 Copy Created with Sketch. Docker

Target OS

alpine:3.13.2
Test your Docker Hub image against our market leading vulnerability database Sign up for free
Severity
  • 1
Status
  • 1
  • 0
  • 0

medium severity

Out-of-bounds Write

  • Vulnerable module: musl/musl
  • Introduced through: musl/musl@1.2.2-r0 and musl/musl-utils@1.2.2-r0
  • Fixed in: 1.2.2_pre2-r0

Detailed paths

  • Introduced through: golang:alpine@* musl/musl@1.2.2-r0
  • Introduced through: golang:alpine@* musl/musl-utils@1.2.2-r0

Overview

Affected versions of this package are vulnerable to Out-of-bounds Write. In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).

Remediation

Upgrade musl to version or higher.

References