chore(findings): shadowsedge/shadowllama/ollama (arm64)
Summary
shadowsedge/shadowllama/ollama (arm64) has 157 new findings discovered during continuous monitoring.
Layer: redhat/ubi/ubi9:9.5-arm64 is EOL, please update if possible
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=shadowsedge/shadowllama/ollama&tag=0.11.11-arm64&branch=master
EPSS (Exploit Prediction Scoring System) provides an estimate of the likelihood that a vulnerability will be exploited in the wild.
KEV (Known Exploited Vulnerabilities) indicates whether a vulnerability is actively being exploited according to CISA.
| id | source | severity | package | impact | workaround | epss_score | kev |
|---|---|---|---|---|---|---|---|
| CVE-2024-7264 | Twistlock CVE | Low | curl-7.76.1-31.el9_6.1 | 0.07100 | false | ||
| CVE-2024-7264 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.07100 | false | ||
| CVE-2024-7264 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.07100 | false | ||
| CVE-2024-1931 | Twistlock CVE | Medium | unbound-1.16.2-19.el9_6.1 | 0.06753 | false | ||
| CVE-2024-1931 | Anchore CVE | Medium | unbound-libs-1.16.2-19.el9_6.1 | 0.06753 | false | ||
| CVE-2023-2728 | Twistlock CVE | Medium | python-decorator-4.4.2-6.el9 | 0.04348 | false | ||
| CVE-2024-33655 | Twistlock CVE | Low | unbound-1.16.2-19.el9_6.1 | 0.03995 | false | ||
| CVE-2024-33655 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.03995 | false | ||
| CVE-2024-56433 | Anchore CVE | Low | shadow-utils-2:4.9-12.el9 | 0.03253 | false | ||
| CVE-2024-9681 | Twistlock CVE | Low | curl-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2024-9681 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.00571 | false | ||
| CVE-2023-43804 | Twistlock CVE | Medium | python-urllib3-1.26.5-6.el9 | 0.00472 | false | ||
| CVE-2024-11053 | Twistlock CVE | Low | curl-7.76.1-31.el9_6.1 | 0.00361 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00361 | false | ||
| CVE-2024-11053 | Anchore CVE | Low | curl-minimal-7.76.1-31.el9_6.1 | 0.00361 | false | ||
| CVE-2024-3651 | Twistlock CVE | Medium | python-idna-2.10-7.el9_4.1 | 0.00338 | false | ||
| CVE-2025-1153 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00212 | false | ||
| CVE-2025-1153 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00212 | false | ||
| CVE-2024-28863 | Twistlock CVE | Medium | python-urllib3-1.26.5-6.el9 | 0.00205 | false | ||
| CVE-2024-28863 | Twistlock CVE | Medium | python-chardet-4.0.0-5.el9 | 0.00205 | false | ||
| CVE-2024-28863 | Twistlock CVE | Medium | python-requests-2.25.1-10.el9_6 | 0.00205 | false | ||
| CVE-2024-28863 | Twistlock CVE | Medium | python-six-1.15.0-9.el9 | 0.00205 | false | ||
| CVE-2024-28863 | Twistlock CVE | Medium | python-dateutil-2.8.1-7.el9 | 0.00205 | false | ||
| CVE-2024-28863 | Twistlock CVE | Medium | libcomps-0.1.18-1.el9 | 0.00205 | false | ||
| CVE-2025-1795 | Twistlock CVE | Low | python3.9-3.9.21-2.el9_6.2 | 0.00184 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-3.9.21-2.el9_6.2 | 0.00184 | false | ||
| CVE-2025-1795 | Anchore CVE | Low | python3-libs-3.9.21-2.el9_6.2 | 0.00184 | false | ||
| CVE-2023-32636 | Twistlock CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00179 | false | ||
| CVE-2023-32636 | Anchore CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00179 | false | ||
| CVE-2023-2727 | Twistlock CVE | Medium | python-decorator-4.4.2-6.el9 | 0.00174 | false | ||
| CVE-2024-34459 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00153 | false | ||
| CVE-2024-37891 | Twistlock CVE | Medium | python-urllib3-1.26.5-6.el9 | 0.00142 | false | ||
| CVE-2025-1632 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00136 | false | ||
| CVE-2025-1632 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00136 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-softokn-freebl-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nspr-4.36.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-softokn-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-sysinit-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2020-12413 | Anchore CVE | Low | nss-util-3.112.0-4.el9_4 | 0.00120 | false | ||
| CVE-2021-45941 | Anchore CVE | Medium | libbpf-2:1.5.0-1.el9 | 0.00117 | false | ||
| CVE-2021-45940 | Anchore CVE | Low | libbpf-2:1.5.0-1.el9 | 0.00117 | false | ||
| CVE-2024-43168 | Twistlock CVE | Low | unbound-1.16.2-19.el9_6.1 | 0.00110 | false | ||
| CVE-2024-43168 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.00110 | false | ||
| CVE-2025-1152 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00093 | false | ||
| CVE-2025-1152 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00093 | false | ||
| CVE-2025-1150 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00093 | false | ||
| CVE-2025-1150 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00093 | false | ||
| CVE-2025-6069 | Twistlock CVE | Medium | python3.9-3.9.21-2.el9_6.2 | 0.00090 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.2 | 0.00090 | false | ||
| CVE-2025-6069 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.2 | 0.00090 | false | ||
| CVE-2025-1151 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00086 | false | ||
| CVE-2025-1151 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00086 | false | ||
| CVE-2023-45322 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00076 | false | ||
| CVE-2025-1377 | Twistlock CVE | Low | elfutils-0.192-6.el9_6 | 0.00074 | false | ||
| CVE-2025-1377 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00074 | false | ||
| CVE-2025-1377 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00074 | false | ||
| CVE-2025-1377 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00074 | false | ||
| CVE-2025-32990 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00072 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00072 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00072 | false | ||
| CVE-2025-32990 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00072 | false | ||
| CVE-2025-7039 | Twistlock CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00066 | false | ||
| CVE-2024-43167 | Twistlock CVE | Low | unbound-1.16.2-19.el9_6.1 | 0.00066 | false | ||
| CVE-2024-43167 | Anchore CVE | Low | unbound-libs-1.16.2-19.el9_6.1 | 0.00066 | false | ||
| CVE-2025-3360 | Twistlock CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00061 | false | ||
| CVE-2025-3360 | Anchore CVE | Low | glib2-2.68.4-16.el9_6.2 | 0.00061 | false | ||
| CVE-2025-47907 | Anchore CVE | High | stdlib-go1.24.0 | 0.00059 | false | ||
| CVE-2025-27113 | Twistlock CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00059 | false | ||
| CVE-2025-27113 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00059 | false | ||
| CVE-2025-6395 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00057 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00057 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00057 | false | ||
| CVE-2025-6395 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00057 | false | ||
| CVE-2025-32988 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00056 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00056 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00056 | false | ||
| CVE-2025-32988 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00056 | false | ||
| CVE-2025-1376 | Twistlock CVE | Low | elfutils-0.192-6.el9_6 | 0.00055 | false | ||
| CVE-2025-1376 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00055 | false | ||
| CVE-2025-1376 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00055 | false | ||
| CVE-2025-1376 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00055 | false | ||
| CVE-2025-59375 | Twistlock CVE | High | expat-2.5.0-5.el9_6 | 0.00054 | false | ||
| CVE-2025-59375 | Anchore CVE | High | expat-2.5.0-5.el9_6 | 0.00054 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-sysinit-3.112.0-4.el9_4 | 0.00050 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-3.112.0-4.el9_4 | 0.00050 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-softokn-3.112.0-4.el9_4 | 0.00050 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-util-3.112.0-4.el9_4 | 0.00050 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nspr-4.36.0-4.el9_4 | 0.00050 | false | ||
| CVE-2024-7531 | Anchore CVE | Low | nss-softokn-freebl-3.112.0-4.el9_4 | 0.00050 | false | ||
| CVE-2023-50495 | Twistlock CVE | Low | ncurses-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-libs-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2023-50495 | Anchore CVE | Low | ncurses-base-6.2-10.20210508.el9_6.2 | 0.00050 | false | ||
| CVE-2025-9086 | Twistlock CVE | Medium | curl-7.76.1-31.el9_6.1 | 0.00038 | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | libcurl-minimal-7.76.1-31.el9_6.1 | 0.00038 | false | ||
| CVE-2025-9086 | Anchore CVE | Medium | curl-minimal-7.76.1-31.el9_6.1 | 0.00038 | false | ||
| CVE-2025-4598 | Twistlock CVE | Medium | systemd-252-51.el9_6.2 | 0.00037 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-pam-252-51.el9_6.2 | 0.00037 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-libs-252-51.el9_6.2 | 0.00037 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-252-51.el9_6.2 | 0.00037 | false | ||
| CVE-2025-4598 | Anchore CVE | Medium | systemd-rpm-macros-252-51.el9_6.2 | 0.00037 | false | ||
| CVE-2025-1371 | Twistlock CVE | Low | elfutils-0.192-6.el9_6 | 0.00033 | false | ||
| CVE-2025-1371 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00033 | false | ||
| CVE-2025-1371 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00033 | false | ||
| CVE-2025-1371 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00033 | false | ||
| CVE-2024-35195 | Twistlock CVE | Medium | python-requests-2.25.1-10.el9_6 | 0.00033 | false | ||
| CVE-2025-4516 | Twistlock CVE | Medium | python3.9-3.9.21-2.el9_6.2 | 0.00027 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-libs-3.9.21-2.el9_6.2 | 0.00027 | false | ||
| CVE-2025-4516 | Anchore CVE | Medium | python3-3.9.21-2.el9_6.2 | 0.00027 | false | ||
| CVE-2025-32989 | Twistlock CVE | Medium | gnutls-3.8.3-6.el9 | 0.00026 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-3.8.3-6.el9 | 0.00026 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-utils-3.8.3-6.el9 | 0.00026 | false | ||
| CVE-2025-32989 | Anchore CVE | Medium | gnutls-dane-3.8.3-6.el9 | 0.00026 | false | ||
| CVE-2024-57360 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00024 | false | ||
| CVE-2024-57360 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00024 | false | ||
| CVE-2024-7143 | Twistlock CVE | Medium | python-urllib3-1.26.5-6.el9 | 0.00023 | false | ||
| CVE-2025-5245 | Twistlock CVE | Medium | gdb-14.2-4.1.el9_6 | 0.00022 | false | ||
| CVE-2025-5245 | Anchore CVE | Medium | gdb-gdbserver-14.2-4.1.el9_6 | 0.00022 | false | ||
| CVE-2025-6170 | Twistlock CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00021 | false | ||
| CVE-2025-6170 | Anchore CVE | Low | libxml2-2.9.13-12.el9_6 | 0.00021 | false | ||
| CVE-2025-4673 | Anchore CVE | Medium | stdlib-go1.24.0 | 0.00019 | false | ||
| CVE-2025-5918 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00018 | false | ||
| CVE-2025-5918 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00018 | false | ||
| CVE-2025-5278 | Twistlock CVE | Medium | coreutils-8.32-39.el9 | 0.00018 | false | ||
| CVE-2025-5278 | Anchore CVE | Medium | coreutils-single-8.32-39.el9 | 0.00018 | false | ||
| CVE-2024-0232 | Anchore CVE | Low | sqlite-libs-3.34.1-8.el9_6 | 0.00018 | false | ||
| CVE-2025-5916 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00017 | false | ||
| CVE-2025-5916 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00017 | false | ||
| CVE-2025-3198 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00016 | false | ||
| CVE-2025-3198 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00016 | false | ||
| CVE-2025-5917 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00015 | false | ||
| CVE-2025-5917 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00015 | false | ||
| CVE-2025-5915 | Twistlock CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00014 | false | ||
| CVE-2025-5915 | Anchore CVE | Low | libarchive-3.5.3-6.el9_6 | 0.00014 | false | ||
| CVE-2024-25260 | Twistlock CVE | Low | elfutils-0.192-6.el9_6 | 0.00014 | false | ||
| CVE-2024-25260 | Anchore CVE | Low | elfutils-libelf-0.192-6.el9_6 | 0.00014 | false | ||
| CVE-2024-25260 | Anchore CVE | Low | elfutils-libs-0.192-6.el9_6 | 0.00014 | false | ||
| CVE-2024-25260 | Anchore CVE | Low | elfutils-default-yama-scope-0.192-6.el9_6 | 0.00014 | false | ||
| CVE-2022-47011 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2022-47011 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2022-47010 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2022-47010 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2022-47007 | Twistlock CVE | Low | gdb-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2022-47007 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | 0.00014 | false | ||
| CVE-2025-9714 | Twistlock CVE | Medium | libxml2-2.9.13-12.el9_6 | 0.00013 | false | ||
| CVE-2025-9714 | Anchore CVE | Medium | libxml2-2.9.13-12.el9_6 | 0.00013 | false | ||
| CVE-2025-22871 | Anchore CVE | Critical | stdlib-go1.24.0 | 0.00013 | false | ||
| CVE-2023-30571 | Twistlock CVE | Medium | libarchive-3.5.3-6.el9_6 | 0.00013 | false | ||
| CVE-2023-30571 | Anchore CVE | Medium | libarchive-3.5.3-6.el9_6 | 0.00013 | false | ||
| CVE-2025-22874 | Anchore CVE | High | stdlib-go1.24.0 | 0.00012 | false | ||
| CVE-2022-3606 | Anchore CVE | Low | libbpf-2:1.5.0-1.el9 | 0.00010 | false | ||
| CVE-2025-4674 | Anchore CVE | High | stdlib-go1.24.0 | 0.00006 | false | ||
| CVE-2023-2222 | Anchore CVE | Low | gdb-gdbserver-14.2-4.1.el9_6 | N/A | false | ||
| addbb93c22e9b0988b8b40392a4538cb | Anchore Compliance | Low | N/A | N/A | |||
| CCE-86570-9 | OSCAP Compliance | Medium | N/A | N/A | |||
| CCE-83450-7 | OSCAP Compliance | High | N/A | N/A |
More information can be found in the VAT located here: https://vat.dso.mil/vat/image?imageName=shadowsedge/shadowllama/ollama&tag=0.11.11-arm64&branch=master
Tasks
Contributor:
-
Apply the StatusReview label to this issue for a merge request reviewand wait for feedback
OR
-
Provide justifications for findings in the VAT (docs) -
Apply the StatusVerification label to this issue for a VAT justifications reviewand wait for feedback
Iron Bank:
-
Review findings and justifications
Note: If the above process is rejected for any reason, the
RevieworVerificationlabel will be removed and the issue will be sent back toTo-Do. Any comments will be listed in this issue for you to address. Once they have been addressed, you must re-add theRevieworVerificationlabel.
Questions?
Contact the Iron Bank team by commenting on this issue with your questions or concerns. If you do not receive a response, add /cc @ironbank-notifications/onboarding.
Additionally, Iron Bank hosts an AMA working session every Wednesday from 1630-1730EST to answer questions.
Edited by CHORE_TOKEN