chore(findings): hashicorp/vault-enterprise
Summary
hashicorp/vault-enterprise has 109 new findings discovered during continuous monitoring.
Layer: redhat/ubi/ubi9:9.4 is EOL, please update if possible
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=hashicorp/vault-enterprise&tag=1.20.3&branch=master
EPSS (Exploit Prediction Scoring System) provides an estimate of the likelihood that a vulnerability will be exploited in the wild.
KEV (Known Exploited Vulnerabilities) indicates whether a vulnerability is actively being exploited according to CISA.
| id | source | severity | package | impact | workaround | epss_score | kev |
|---|---|---|---|---|---|---|---|
| CVE-2024-7264 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.07100 | false | ||
| CVE-2024-7264 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.07100 | false | ||
| CVE-2024-1931 | Anchore CVE | Medium | unbound-libs-1.16.2-19.el9_6.1 | 0.06753 | false | ||
| CVE-2024-33655 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.04101 | false | ||
| CVE-2024-56433 | Anchore CVE | Low | shadow-utils-2:4.9-12.el9 | 0.03253 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00361 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.00361 | false | ||
| CVE-2022-0529 | Anchore CVE | Low | unzip-6.0-58.el9_5 | 0.00242 | false | ||
| CVE-2022-0529 | Twistlock CVE | Low | unzip-6.0-58.el9_5 | 0.00242 | false | ||
| CVE-2025-1153 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00212 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-3.9.21-2.el9_6.2 | 0.00184 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-libs-3.9.21-2.el9_6.2 | 0.00184 | false | ||
| CVE-2023-32636 | Anchore CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00179 | false | ||
| CVE-2021-4217 | Anchore CVE | Low | unzip-6.0-58.el9_5 | 0.00172 | false | ||
| CVE-2021-4217 | Twistlock CVE | Low | unzip-6.0-58.el9_5 | 0.00172 | false | ||
| CVE-2024-41996 | Anchore CVE | Low | openssl-1:3.2.2-6.el9_5.1 | 0.00166 | false | ||
| CVE-2024-41996 | Anchore CVE | Low | openssl-libs-1:3.2.2-6.el9_5.1 | 0.00166 | false | ||
| CVE-2024-34459 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00153 | false | ||
| CVE-2025-1632 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00136 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-sysinit-3.112.0-4.el9_4 | 0.00121 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-softokn-3.112.0-4.el9_4 | 0.00121 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-3.112.0-4.el9_4 | 0.00121 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-softokn-freebl-3.112.0-4.el9_4 | 0.00121 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-util-3.112.0-4.el9_4 | 0.00121 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nspr-4.36.0-4.el9_4 | 0.00121 | false | ||
| CVE-2022-0530 | Anchore CVE | Low | unzip-6.0-58.el9_5 | 0.00120 | false | ||
| CVE-2022-0530 | Twistlock CVE | Low | unzip-6.0-58.el9_5 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-softokn-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-sysinit-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nspr-4.36.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-util-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-softokn-freebl-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2021-45941 | Anchore CVE | Medium | libbpf-2:1.5.0-1.el9 | 0.00117 | false | ||
| CVE-2021-45940 | Anchore CVE | Low | libbpf-2:1.5.0-1.el9 | 0.00117 | false | ||
| CVE-2025-1152 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00093 | false | ||
| CVE-2025-1150 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00093 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.2 | 0.00090 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.2 | 0.00090 | false | ||
| CVE-2025-1151 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00086 | false | ||
| CVE-2024-13176 | Anchore CVE | Low | openssl-1:3.2.2-6.el9_5.1 | 0.00080 | false | ||
| CVE-2024-13176 | Anchore CVE | Low | openssl-libs-1:3.2.2-6.el9_5.1 | 0.00080 | false | ||
| CVE-2023-45322 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00076 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00072 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00072 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00072 | false | ||
| CVE-2025-7039 | Twistlock CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00066 | false | ||
| CVE-2025-1377 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00065 | false | ||
| CVE-2025-1377 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00065 | false | ||
| CVE-2025-1377 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00065 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00057 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00057 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00057 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00056 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00056 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00056 | false | ||
| CVE-2025-27113 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00055 | false | ||
| CVE-2025-3360 | Anchore CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00052 | false | ||
| CVE-2025-58058 | Twistlock CVE | Medium | github.com/ulikunitz/xz-v0.5.13 | 0.00051 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-base-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-libs-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2022-27943 | Anchore CVE | Low | libstdc++-11.5.0-5.el9_5 | 0.00050 | false | ||
| CVE-2025-1376 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00048 | false | ||
| CVE-2025-1376 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00048 | false | ||
| CVE-2025-1376 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00048 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-pam-252-51.el9_6.1 | 0.00037 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-libs-252-51.el9_6.1 | 0.00037 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-252-51.el9_6.1 | 0.00037 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-rpm-macros-252-51.el9_6.1 | 0.00037 | false | ||
| CVE-2024-43167 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.00032 | false | ||
| CVE-2024-43168 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.00031 | false | ||
| CVE-2025-1371 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00029 | false | ||
| CVE-2025-1371 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00029 | false | ||
| CVE-2025-1371 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00029 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00026 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00026 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00026 | false | ||
| CVE-2024-57360 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00024 | false | ||
| CVE-2025-5245 | Anchore CVE | Medium | gdb-gdbserver-14.2-4.1.el9_6 | 0.00022 | false | ||
| CVE-2025-6170 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00021 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.2 | 0.00021 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.2 | 0.00021 | false | ||
| CVE-2025-5918 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00018 | false | ||
| CVE-2025-5278 | Anchore CVE | Medium | coreutils-single-8.32-39.el9 | 0.00018 | false | ||
| CVE-2024-0232 | Anchore CVE | Low | sqlite-libs-3.34.1-8.el9_6 | 0.00018 | false | ||
| CVE-2025-5916 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00017 | false | ||
| CVE-2025-5917 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00015 | false | ||
| CVE-2025-5915 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00014 | false | ||
| CVE-2024-25260 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00014 | false | ||
| CVE-2024-25260 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00014 | false | ||
| CVE-2024-25260 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00014 | false | ||
| CVE-2022-47011 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2022-47010 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2022-47007 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2025-9714 | Anchore CVE | Medium | libxml2-2.9.13-12.el9_6 | 0.00013 | false | ||
| CVE-2025-9714 | Twistlock CVE | Medium | libxml2-2.9.13-12.el9_6 | 0.00013 | false | ||
| CVE-2023-30571 | Anchore CVE | Medium | libarchive-3.5.3-6.el9_6 | 0.00013 | false | ||
| CVE-2025-3198 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00012 | false | ||
| CVE-2022-3606 | Anchore CVE | Low | libbpf-2:1.5.0-1.el9 | 0.00010 | false | ||
| CVE-2025-9086 | Twistlock CVE | Medium | curl-7.76.1-31.el9_6.1 | N/A | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | libcurl-minimal-7.76.1-31.el9_6.1 | N/A | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | curl-minimal-7.76.1-31.el9_6.1 | N/A | false | ||
| CVE-2023-2222 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | N/A | false | ||
| b18c88ddeab24abfb92ae2ccddb0b022 | Anchore Compliance | Low | N/A | N/A | |||
| addbb93c22e9b0988b8b40392a4538cb | Anchore Compliance | Low | N/A | N/A | |||
| GHSA-jc7w-c686-c4v9 | Anchore CVE | Medium | github.com/ulikunitz/xz-v0.5.13 | N/A | N/A | ||
| CCE-83911-8 | OSCAP Compliance | Medium | N/A | N/A |
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=hashicorp/vault-enterprise&tag=1.20.3&branch=master
Tasks
Contributor:
-
Apply the StatusReview label to this issue for a merge request reviewand wait for feedback
OR
-
Provide justifications for findings in the VAT (docs) -
Apply the StatusVerification label to this issue for a VAT justifications reviewand wait for feedback
Iron Bank:
-
Review findings and justifications
Note: If the above process is rejected for any reason, the
RevieworVerificationlabel will be removed and the issue will be sent back toTo-Do. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add theRevieworVerificationlabel.
Questions?
Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.
Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.
Edited by CHORE_TOKEN