UNCLASSIFIED - NO CUI

Skip to content

chore(findings): opensource/triton-inference-server/server

Summary

opensource/triton-inference-server/server has 170 new findings discovered during continuous monitoring.

More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=opensource/triton-inference-server/server&tag=24.12.01&branch=master

EPSS (Exploit Prediction Scoring System) provides an estimate of the likelihood that a vulnerability will be exploited in the wild.

KEV (Known Exploited Vulnerabilities) indicates whether a vulnerability is actively being exploited according to CISA.

id source severity package impact workaround epss_score kev
CVE-2018-6952 Twistlock CVE Low patch-2.7.6-7build3 0.11051 false
CVE-2018-6952 Anchore CVE Low patch-2.7.6-7build3 0.11051 false
CVE-2021-45261 Twistlock CVE Low patch-2.7.6-7build3 0.00387 false
CVE-2021-45261 Anchore CVE Low patch-2.7.6-7build3 0.00387 false
CVE-2017-13716 Twistlock CVE Low binutils-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low libctf-nobfd0-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low libsframe1-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low libgprofng0-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low libbinutils-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low libctf0-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low binutils-common-2.42-4ubuntu2.5 0.00196 false
CVE-2017-13716 Anchore CVE Low binutils-2.42-4ubuntu2.5 0.00196 false
CVE-2025-1148 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1148 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1148 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1148 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1148 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1148 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1148 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1148 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00181 false
CVE-2025-1147 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1147 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1147 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1147 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1147 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1147 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1147 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1147 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00163 false
CVE-2025-1352 Anchore CVE Low libelf1t64-0.190-1.1build4.1 0.00135 false
CVE-2025-1352 Twistlock CVE Low elfutils-0.190-1.1build4.1 0.00135 false
CVE-2025-1180 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00125 false
CVE-2025-1180 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00125 false
CVE-2025-1180 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00125 false
CVE-2025-1180 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00125 false
CVE-2025-1180 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00125 false
CVE-2025-1180 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00125 false
CVE-2025-1180 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00125 false
CVE-2025-1180 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00125 false
CVE-2019-20633 Anchore CVE Low patch-2.7.6-7build3 0.00115 false
CVE-2025-0167 Anchore CVE Low libcurl4-openssl-dev-8.5.0-2ubuntu10.6 0.00092 false
CVE-2025-0167 Anchore CVE Low libcurl4t64-8.5.0-2ubuntu10.6 0.00092 false
CVE-2025-0167 Twistlock CVE Low curl-8.5.0-2ubuntu10.6 0.00092 false
CVE-2025-4373 Anchore CVE Medium libglib2.0-data-2.80.0-6ubuntu3.2 0.00083 false
CVE-2025-4373 Twistlock CVE Medium glib2.0-2.80.0-6ubuntu3.2 0.00083 false
CVE-2025-6297 Anchore CVE Low libdpkg-perl-1.22.6ubuntu6.1 0.00082 false
CVE-2025-6297 Anchore CVE Low dpkg-dev-1.22.6ubuntu6.1 0.00082 false
CVE-2025-1152 Anchore CVE Low libgprofng0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1152 Anchore CVE Low libctf0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1152 Anchore CVE Low binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1152 Anchore CVE Low libctf-nobfd0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1152 Anchore CVE Low binutils-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1152 Anchore CVE Low binutils-common-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1152 Anchore CVE Low libbinutils-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1152 Anchore CVE Low libsframe1-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low libctf0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low libctf-nobfd0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low binutils-common-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low libsframe1-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low libgprofng0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low binutils-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1150 Anchore CVE Low libbinutils-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1149 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00081 false
CVE-2025-1151 Anchore CVE Low libctf0-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1151 Anchore CVE Low libctf-nobfd0-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1151 Anchore CVE Low libsframe1-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1151 Anchore CVE Low binutils-common-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1151 Anchore CVE Low libbinutils-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1151 Anchore CVE Low libgprofng0-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1151 Anchore CVE Low binutils-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1151 Anchore CVE Low binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00075 false
CVE-2025-1377 Anchore CVE Medium libelf1t64-0.190-1.1build4.1 0.00065 false
CVE-2025-1377 Twistlock CVE Medium elfutils-0.190-1.1build4.1 0.00065 false
CVE-2025-6052 Anchore CVE Low libglib2.0-0t64-2.80.0-6ubuntu3.4 0.00056 false
CVE-2025-6052 Anchore CVE Low libglib2.0-bin-2.80.0-6ubuntu3.4 0.00056 false
CVE-2025-6052 Anchore CVE Low libglib2.0-data-2.80.0-6ubuntu3.2 0.00056 false
CVE-2025-6052 Twistlock CVE Low glib2.0-2.80.0-6ubuntu3.2 0.00056 false
CVE-2025-6052 Twistlock CVE Low glib2.0-2.80.0-6ubuntu3.4 0.00056 false
CVE-2025-49795 Anchore CVE Medium libxml2-2.9.14+dfsg-1.3ubuntu3.4 0.00056 false
CVE-2025-3360 Anchore CVE Low libglib2.0-data-2.80.0-6ubuntu3.2 0.00054 false
CVE-2025-3360 Anchore CVE Low libglib2.0-bin-2.80.0-6ubuntu3.4 0.00054 false
CVE-2025-3360 Anchore CVE Low libglib2.0-0t64-2.80.0-6ubuntu3.4 0.00054 false
CVE-2025-1376 Anchore CVE Low libelf1t64-0.190-1.1build4.1 0.00048 false
CVE-2025-1376 Twistlock CVE Low elfutils-0.190-1.1build4.1 0.00048 false
CVE-2022-47022 Anchore CVE Medium libhwloc15-2.10.0-1build1 0.00042 false
CVE-2025-1372 Anchore CVE Medium libelf1t64-0.190-1.1build4.1 0.00031 false
CVE-2025-1372 Twistlock CVE Medium elfutils-0.190-1.1build4.1 0.00031 false
CVE-2025-7039 Anchore CVE Low libglib2.0-data-2.80.0-6ubuntu3.2 0.00029 false
CVE-2025-7039 Anchore CVE Low libglib2.0-0t64-2.80.0-6ubuntu3.4 0.00029 false
CVE-2025-7039 Anchore CVE Low libglib2.0-bin-2.80.0-6ubuntu3.4 0.00029 false
CVE-2025-5222 Twistlock CVE Low icu-74.2-1ubuntu3.1 0.00029 false
CVE-2025-5222 Anchore CVE Low libicu74-74.2-1ubuntu3.1 0.00029 false
CVE-2025-1371 Anchore CVE Medium libelf1t64-0.190-1.1build4.1 0.00029 false
CVE-2025-1371 Twistlock CVE Medium elfutils-0.190-1.1build4.1 0.00029 false
CVE-2025-1365 Anchore CVE Medium libelf1t64-0.190-1.1build4.1 0.00027 false
CVE-2025-1365 Twistlock CVE Medium elfutils-0.190-1.1build4.1 0.00027 false
CVE-2025-8224 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00023 false
CVE-2025-8224 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00023 false
CVE-2025-8224 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00023 false
CVE-2025-8224 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00023 false
CVE-2025-8224 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00023 false
CVE-2025-8224 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00023 false
CVE-2025-8224 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00023 false
CVE-2025-8224 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00023 false
CVE-2025-5245 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5245 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5245 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5245 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5245 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5245 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5245 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5245 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00022 false
CVE-2025-5244 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00022 false
CVE-2025-8225 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8225 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8225 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8225 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8225 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8225 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8225 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8225 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00019 false
CVE-2025-8058 Anchore CVE Medium libc-dev-bin-2.39-0ubuntu8.5 0.00018 false
CVE-2025-8058 Anchore CVE Medium libc6-dev-2.39-0ubuntu8.5 0.00018 false
CVE-2025-5918 Anchore CVE Low libarchive13t64-3.7.2-2ubuntu0.5 0.00018 false
CVE-2025-8114 Anchore CVE Medium libssh-4-0.10.6-2ubuntu0.1 0.00015 false
CVE-2025-8114 Twistlock CVE Medium libssh-0.10.6-2ubuntu0.1 0.00015 false
CVE-2025-7546 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7546 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7546 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7546 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7546 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7546 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7546 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7546 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00015 false
CVE-2025-7545 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00014 false
CVE-2025-7545 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00014 false
CVE-2025-7545 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00014 false
CVE-2025-7545 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00014 false
CVE-2025-7545 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00014 false
CVE-2025-7545 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00014 false
CVE-2025-7545 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00014 false
CVE-2025-7545 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00014 false
CVE-2024-25260 Anchore CVE Low libelf1t64-0.190-1.1build4.1 0.00014 false
CVE-2024-25260 Twistlock CVE Low elfutils-0.190-1.1build4.1 0.00014 false
CVE-2025-3198 Anchore CVE Medium binutils-x86-64-linux-gnu-2.42-4ubuntu2.5 0.00011 false
CVE-2025-3198 Anchore CVE Medium libbinutils-2.42-4ubuntu2.5 0.00011 false
CVE-2025-3198 Anchore CVE Medium binutils-common-2.42-4ubuntu2.5 0.00011 false
CVE-2025-3198 Anchore CVE Medium libctf-nobfd0-2.42-4ubuntu2.5 0.00011 false
CVE-2025-3198 Anchore CVE Medium libsframe1-2.42-4ubuntu2.5 0.00011 false
CVE-2025-3198 Anchore CVE Medium libctf0-2.42-4ubuntu2.5 0.00011 false
CVE-2025-3198 Anchore CVE Medium libgprofng0-2.42-4ubuntu2.5 0.00011 false
CVE-2025-3198 Anchore CVE Medium binutils-2.42-4ubuntu2.5 0.00011 false
CVE-2025-8732 Anchore CVE Medium libxml2-2.9.14+dfsg-1.3ubuntu3.4 0.00006 false
USN-7532-1 OSCAP Compliance Medium N/A N/A
USN-7369-1 OSCAP Compliance Medium N/A N/A

More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=opensource/triton-inference-server/server&tag=24.12.01&branch=master

Tasks

Contributor:

  • Provide justifications for findings in the VAT (docs)
  • Apply the StatusVerification label to this issue and wait for feedback

Iron Bank:

  • Review findings and justifications

Note: If the above process is rejected for any reason, the Verification label will be removed and the issue will be sent back to Open. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add the Verification label.

Questions?

Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.

Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.

Edited by CHORE_TOKEN
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information