# cve-2022-3474

Published articles for cve-2022-3474.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## The haunting of CVE-2022-3474: A ghostly tale of package detection failure

DevFeed: [The haunting of CVE-2022-3474: A ghostly tale of package detection failure](<https://devfeed.tech/articles/the-haunting-of-cve-2022-3474-a-ghostly-tale-of-package-detection-failure-13254.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-haunting-of-cve-2022-3474-a-ghostly-tale-of-package-detection-failure>)

Published: 2023-10-10T00:00:00Z

Content type: article

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [vulnerability](<https://devfeed.tech/topics/vulnerability.md>), [container images](<https://devfeed.tech/topics/container-images.md>), [chainguard images](<https://devfeed.tech/topics/chainguard-images.md>), [vulnerability management](<https://devfeed.tech/topics/vulnerability-management.md>), [bazel](<https://devfeed.tech/topics/bazel.md>), [trivy](<https://devfeed.tech/topics/trivy.md>)

Tags: [bazel](<https://devfeed.tech/tags/bazel.md>), [chainguard-images](<https://devfeed.tech/tags/chainguard-images.md>), [container-images](<https://devfeed.tech/tags/container-images.md>), [cve-2022-3474](<https://devfeed.tech/tags/cve-2022-3474.md>), [false-negative](<https://devfeed.tech/tags/false-negative.md>), [trivy](<https://devfeed.tech/tags/trivy.md>), [vulnerability-management](<https://devfeed.tech/tags/vulnerability-management.md>)

### AI overview

The article explains how scanners can produce false negatives when they fail to identify a package in a container image. Using CVE-2022-3474 in Bazel 5.3.1 as an example, it describes how missing Bazel package metadata prevented Trivy from detecting the vulnerability and presents Chainguard Images' package metadata and SBOMs as a way to improve detection.

### Source excerpt

Explore the risks of scanner false negatives, the pitfalls of missing the Bazel package, and how Chainguard Images ensure accurate vulnerability detection.