Vulnerability Reportnode:24

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit heap overflows in OpenEXR (CVE-2023-5841) or glibc (CVE-2019-1010023) to execute arbitrary code or cause denial of service, especially if the image's services expose these libraries to network traffic. Note that CVE-2019-1010023 requires user interaction (running ldd on an ELF file), limiting exploitability in automated deployments. Updating packages to patched versions and minimizing exposed services are key mitigations. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.