docker.io/apache/skywalking-oap-server:11.0.0 linux/amd64

docker.io/apache/skywalking-oap-server:11.0.0 - Trivy安全扫描结果 扫描时间: 2026-09-02 13:58
全部漏洞信息
低危漏洞:26 中危漏洞:110 高危漏洞:16 严重漏洞:0

系统OS: ubuntu 26.04 扫描引擎: Trivy 扫描时间: 2026-09-02 13:58

docker.io/apache/skywalking-oap-server:11.0.0 (ubuntu 26.04) (ubuntu)
低危漏洞:26 中危漏洞:97 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-13595 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
bsdutils CVE-2026-27456 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils CVE-2026-3184 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
bsdutils CVE-2026-53612 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53613 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53614 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53615 中危 1:2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
diffutils CVE-2026-53910 中危 1:3.12-1 1:3.12-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
gnu-coreutils CVE-2026-56391 中危 9.7-3ubuntu2 9.7-3ubuntu2.1 coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-07-24 09:16 修改: 2026-08-26 13:52
libattr1 CVE-2026-54371 中危 1:2.5.2-4 1:2.5.2-4ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 14:16 修改: 2026-08-27 13:18
libblkid1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libblkid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libblkid1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libexpat1 CVE-2025-66382 中危 2.7.4-1 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libmount1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libmount1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libmount1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libp11-kit0 CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-06-29 19:16 修改: 2026-08-31 16:17
libsmartcols1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libsmartcols1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libsmartcols1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3t64 CVE-2026-14456 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-18798 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63072 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63076 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libuuid1 CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libuuid1 CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1 CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
libuuid1 CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-13595 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
login CVE-2026-27456 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login CVE-2026-3184 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
login CVE-2026-53612 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53613 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53614 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
login CVE-2026-53615 中危 1:4.16.0-2+really2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
mount CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
mount CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl CVE-2026-14456 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
openssl CVE-2026-18798 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl CVE-2026-63072 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63076 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-14456 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 15:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-18798 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC server may trigger double free when processing INITIAL packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18798

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63072 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63076 中危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
p11-kit CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-06-29 19:16 修改: 2026-08-31 16:17
p11-kit-modules CVE-2026-13757 中危 0.26.2-2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-06-29 19:16 修改: 2026-08-31 16:17
rust-coreutils CVE-2026-35341 中危 0.8.0-0ubuntu3 A vulnerability in uutils coreutils mkfifo allows for the unauthorized ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35341

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35344 中危 0.8.0-0ubuntu3 The dd utility in uutils coreutils suppresses errors during file trunc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35344

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35345 中危 0.8.0-0ubuntu3 A vulnerability in the tail utility of uutils coreutils allows for the ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35345

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35348 中危 0.8.0-0ubuntu3 The sort utility in uutils coreutils is vulnerable to a process panic ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35348

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35350 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils fails to properly handle setuid and ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35350

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35351 中危 0.8.0-0ubuntu3 The mv utility in uutils coreutils fails to preserve file ownership du ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35351

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35352 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35352

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35354 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the mv ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35354

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35357 中危 0.8.0-0ubuntu3 The cp utility in uutils coreutils is vulnerable to an information dis ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35357

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35359 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability in the cp utilit ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35359

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35360 中危 0.8.0-0ubuntu3 The touch utility in uutils coreutils is vulnerable to a Time-of-Check ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35360

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35363 中危 0.8.0-0ubuntu3 A vulnerability in the rm utility of uutils coreutils allows the bypas ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35363

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35364 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) race condition exists in the m ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35364

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35367 中危 0.8.0-0ubuntu3 The nohup utility in uutils coreutils creates its default output file, ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35367

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35368 中危 0.8.0-0ubuntu3 A vulnerability exists in the chroot utility of uutils coreutils when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35368

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35370 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils miscalculates the groups= section o ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35370

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35371 中危 0.8.0-0ubuntu3 The id utility in uutils coreutils exhibits incorrect behavior in its ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35371

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35373 中危 0.8.0-0ubuntu3 A logic error in the ln utility of uutils coreutils causes the program ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35373

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35374 中危 0.8.0-0ubuntu3 A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the sp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35374

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
rust-coreutils CVE-2026-35377 中危 0.8.0-0ubuntu3 A logic error in the env utility of uutils coreutils causes a failure ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35377

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-22 17:16 修改: 2026-06-17 10:40
tar CVE-2026-18477 中危 1.35+dfsg-4ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-03 17:16 修改: 2026-09-01 03:16
tar CVE-2026-18508 中危 1.35+dfsg-4ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-03 16:16 修改: 2026-09-01 03:16
util-linux CVE-2026-13595 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
util-linux CVE-2026-27456 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux CVE-2026-3184 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: Access control bypass due to improper hostname canonicalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-03 19:17 修改: 2026-08-31 12:17
util-linux CVE-2026-53612 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53613 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53614 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53615 中危 2.41.3-3ubuntu2 2.41.3-3ubuntu2.2 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgcrypt20 CVE-2024-2236 低危 1.12.0-2ubuntu1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
libbz2-1.0 CVE-2026-42250 低危 1.0.8-6build2 1.0.8-6ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
openssl CVE-2026-14457 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl CVE-2026-54874 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63073 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
openssl CVE-2026-63074 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63075 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-75803 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:76112b302824812cdbc5642b8b48aee3688fdc14573e4f7e2fec2c7866f7569a

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
login.defs CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64 CVE-2026-14457 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-54874 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63073 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
openssl-provider-legacy CVE-2026-14457 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: RPK server signature algorithm selection can dereference a missing certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14457

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:17 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-54874 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63073 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: untrusted sender DN used as format string in CMP response validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63073

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-31 20:17
openssl-provider-legacy CVE-2026-63074 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-63075 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl-provider-legacy CVE-2026-75803 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63074 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63075 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.4 openssl: QUIC ACK-only packet retention can cause memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63075

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
passwd CVE-2024-56433 低危 1:4.17.4-2ubuntu3 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64 CVE-2026-75803 低危 3.5.5-1ubuntu3.3 3.5.5-1ubuntu3.5 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libsystemd0 CVE-2026-40228 低危 259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1 CVE-2026-40228 低危 259.5-0ubuntu3.4 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
gnu-coreutils CVE-2025-5278 低危 9.7-3ubuntu2 9.7-3ubuntu2.1 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2025-05-27 21:15 修改: 2026-08-31 15:17
zlib1g CVE-2026-27171 低危 1:1.3.dfsg+really1.3.1-1ubuntu3 1:1.3.dfsg+really1.3.1-1ubuntu3.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:0 中危漏洞:13 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.micrometer:micrometer-core CVE-2026-40984 高危 1.14.4 1.16.6, 1.15.12 micrometer-core: micrometer-jetty11: micrometer-jetty12: Micrometer: Denial of Service via specially crafted HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40984

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-06-09 05:16 修改: 2026-08-13 13:18
io.netty:netty-codec-compression CVE-2026-59901 高危 4.2.15.Final 4.2.16.Final io.netty/netty-codec-compression: Netty: Infinite loop in netty-codec-compression (bzip2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59901

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
io.netty:netty-codec-haproxy CVE-2026-55851 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty codec-haproxy: Denial of Service via crafted PROXY protocol v2 message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55851

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:48
io.netty:netty-codec-http CVE-2026-55831 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Denial of Service via SPDY SETTINGS frame processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55831

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-21 00:17 修改: 2026-07-23 15:17
io.netty:netty-codec-http CVE-2026-55833 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via SPDY header decompression amplification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55833

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-21 00:17 修改: 2026-07-23 13:34
io.netty:netty-codec-http CVE-2026-56745 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final netty: io.netty/netty-codec-http: Netty: Denial of Service via memory exhaustion in SPDY-to-HTTP codec

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56745

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:46
io.netty:netty-codec-http2 CVE-2026-56819 高危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Denial of Service via HTTP/2 DATA frame memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56819

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-21 23:17 修改: 2026-07-30 14:46
org.postgresql:postgresql CVE-2026-54291 高危 42.7.11 42.7.12 org.postgresql/postgresql: com.ongres.scram/scram-client: pgjdbc: Man-in-the-middle protection bypass via SCRAM-SHA-256-PLUS downgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54291

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-06 19:17 修改: 2026-07-09 13:16
io.netty:netty-codec-haproxy CVE-2026-59919 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-haproxy: Netty: Improper CR/LF neutralization in netty-codec-haproxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59919

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:33
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.18.8 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
at.yawk.lz4:lz4-java CVE-2026-59949 中危 1.10.1 1.11.1 yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.1, JN ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59949

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-08-18 15:16 修改: 2026-08-18 18:18
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.18.8 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
io.netty:netty-codec-http CVE-2026-56746 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Security control bypass allows unauthorized requests via null origin header

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56746

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-21 22:17 修改: 2026-07-30 14:47
io.netty:netty-codec-http CVE-2026-59898 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Protocol version confusion in netty-codec-http (WebSocket)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59898

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-29 19:16 修改: 2026-08-06 20:35
io.netty:netty-codec-http CVE-2026-59899 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: Memory exhaustion in netty-codec-http (decompression bomb)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59899

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:25
io.netty:netty-codec-http CVE-2026-59903 中危 4.2.15.Final 4.2.17.Final, 4.1.137.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59903

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-08-17 18:17 修改: 2026-08-17 19:16
io.netty:netty-codec-http CVE-2026-59921 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http: Netty: CRLF Injection via Multipart Filename in Netty HttpPostRequestEncoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59921

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-28 23:17 修改: 2026-08-07 15:05
io.netty:netty-codec-dns CVE-2026-73508 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-dns: Netty: Denial of Service via Memory Leak in DNS Record Decoder with Malformed Domain Names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-73508

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-08-13 15:20 修改: 2026-08-13 18:18
io.netty:netty-codec-http2 CVE-2026-59900 中危 4.2.15.Final 4.2.16.Final, 4.1.136.Final io.netty/netty-codec-http2: Netty: Improper header neutralization in netty-codec-http2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59900

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-29 18:16 修改: 2026-08-06 20:29
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.18.8 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:e915e3bec9492f4ffce114c0f6292c557b2e612dcbe72d9c201d32a55c908d59

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
usr/bin/pebble (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:8 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2026-33818 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-39821 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-05-22 16:16 修改: 2026-08-31 13:18
stdlib CVE-2026-46600 高危 v1.26.5 1.26.6, 1.27.0-rc.3 golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46600

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-07-21 20:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56853 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56858 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 html/template: golang: Go html/template: Cross-Site Scripting via pathological input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56859 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib CVE-2026-56860 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib CVE-2026-56862 高危 v1.26.5 1.25.13, 1.26.6, 1.27.0-rc.3 crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862

镜像层: sha256:b577adbc0b589bb7c1d3be98cc4b703e8228ab4413156754445e8b20a001c5d3

发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×