New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

CVE-2021-42377 reported in prometheus/alertmanager:v0.23.0 #2831

Closed

ggunawan opened this issue Feb 11, 2022 · 1 comment

ggunawan commented Feb 11, 2022

Our docker image scanning tools reported that alertmanager:v0.23.0 has CVE-2021-42377 with following description

An attacker-controlled pointer free in Busybox's hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the &&& string. This may be used for remote code execution under rare conditions of filtered command input.

Is it possible creating newer version of this image to resolve this CVE ?

Member

simonpasquier commented Dec 23, 2022

closed by #3187

simonpasquier closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment