Vulnerability Reportrust:1.95

This base/runtime image carries significant vulnerabilities that any image built on it would inherit; remediate them in the final image before production. An attacker could exploit CVE-2019-1010023 in glibc to execute arbitrary code by tricking a user into running ldd on a malicious ELF, or leverage CVE-2018-16376 in openjpeg to trigger a heap-based buffer overflow leading to remote denial of service. While the image is from an official publisher, the high number of exposed CVEs—83 with severity 7.0 or higher—demands patching or alternative base image selection. Post-exploit findings are low severity, so the primary risk stems from the exposed surface. Note: this is a general-purpose base/runtime image — many findings live in components that an application built on top may never load, so actual exploitability depends on the final image. For an accurate risk picture, re-scan the final application image with context.