imgbased vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the imgbased package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Insufficiently Protected Credentials	<0:1.1.9-0.1.el7ev
M Untrusted Search Path	<0:1.0.22-1.el7ev
M Improper Input Validation	<0:1.0.22-1.el7ev
M Information Exposure Through Log Files	<0:1.0.20-0.1.el7ev
H Incorrect Privilege Assignment	<0:1.0.16-0.1.el7ev
M Allocation of Resources Without Limits or Throttling	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Resource Exhaustion	<0:1.0.29-1.el7ev
M Directory Traversal	<0:1.0.29-1.el7ev
M Heap-based Buffer Overflow	<0:1.0.29-1.el7ev
M Buffer Overflow	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Link Following	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Information Exposure	<0:1.0.29-1.el7ev
M NULL Pointer Dereference	<0:1.0.29-1.el7ev
M Stack-based Buffer Overflow	<0:1.0.29-1.el7ev
M Untrusted Search Path	<0:1.0.29-1.el7ev
H Integer Overflow or Wraparound	<0:1.1.9-0.1.el7ev
M Authentication Bypass by Primary Weakness	<0:1.0.29-1.el7ev
M Deserialization of Untrusted Data	<0:1.0.29-1.el7ev
M Improper Input Validation	<0:1.0.29-1.el7ev
M Out-of-Bounds	<0:1.0.29-1.el7ev
H Arbitrary Command Injection	<0:1.0.16-0.1.el7ev
H Integer Overflow or Wraparound	<0:1.0.17-0.1.el7ev
H Integer Overflow or Wraparound	<0:1.0.17-0.1.el7ev
H Directory Traversal	<0:1.0.24-1.el7ev
H Execution with Unnecessary Privileges	<0:1.0.16-0.1.el7ev
H Execution with Unnecessary Privileges	<0:1.0.16-0.1.el7ev
H Incorrect Conversion between Numeric Types	<0:0.9.47-0.1.el7ev
M Improper Input Validation	<0:0.8.16-0.1.el7ev
M Improper Input Validation	<0:0.8.16-0.1.el7ev
H Improper Privilege Management	<0:1.1.9-0.1.el7ev
H Stack-based Buffer Overflow	<0:1.1.9-0.1.el7ev
M Covert Timing Channel	<0:1.1.10-0.1.el7ev
H Missing Required Cryptographic Step	<0:1.1.9-0.1.el7ev
H Encoding Error	<0:1.1.9-0.1.el7ev
M Information Exposure	<0:1.1.7-0.1.el7ev

Vulnerability

Vulnerable Version

Insufficiently Protected Credentials

<0:1.1.9-0.1.el7ev