docker.io/azul/zulu-openjdk:25-jre-crac-latest linux/amd64

docker.io/azul/zulu-openjdk:25-jre-crac-latest - Trivy安全扫描结果扫描时间: 2026-09-08 14:09

全部漏洞信息

低危漏洞:16

中危漏洞:5

高危漏洞:0

严重漏洞:0

系统OS: ubuntu 22.04 扫描引擎: Trivy 扫描时间: 2026-09-08 14:09

docker.io/azul/zulu-openjdk:25-jre-crac-latest (ubuntu 22.04) (ubuntu)

低危漏洞:16

中危漏洞:5

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	漏洞信息
libc-bin	CVE-2026-18374	中危	2.35-0ubuntu3.14	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6	CVE-2026-18374	中危	2.35-0ubuntu3.14	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
locales	CVE-2026-18374	中危	2.35-0ubuntu3.14	glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374 镜像层: sha256:41e67ef532078513e518c3bc5dda8a5b411a98d4b60549461c5656e283378933 发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
tar	CVE-2026-18477	中危	1.34+dfsg-1ubuntu0.1.22.04.6	tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar	CVE-2026-18508	中危	1.34+dfsg-1ubuntu0.1.22.04.6	tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
libncursesw6	CVE-2023-50495	低危	6.3-2ubuntu0.3	ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:41e67ef532078513e518c3bc5dda8a5b411a98d4b60549461c5656e283378933 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libpcre2-8-0	CVE-2022-41409	低危	10.39-3ubuntu0.1	pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
libstdc++6	CVE-2022-27943	低危	12.3.0-1ubuntu1~22.04.3	binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libsystemd0	CVE-2026-40228	低危	249.11-0ubuntu3.22	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtinfo6	CVE-2023-50495	低危	6.3-2ubuntu0.3	ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:41e67ef532078513e518c3bc5dda8a5b411a98d4b60549461c5656e283378933 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
libudev1	CVE-2026-40228	低危	249.11-0ubuntu3.22	systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libzstd1	CVE-2022-4899	低危	1.4.8+dfsg-3build1	zstd: mysql: buffer overrun in util.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22
gcc-12-base	CVE-2022-27943	低危	12.3.0-1ubuntu1~22.04.3	binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
login	CVE-2023-29383	低危	1:4.8.1-2ubuntu2.2	shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
login	CVE-2024-56433	低危	1:4.8.1-2ubuntu2.2	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
ncurses-base	CVE-2023-50495	低危	6.3-2ubuntu0.3	ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:41e67ef532078513e518c3bc5dda8a5b411a98d4b60549461c5656e283378933 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
ncurses-bin	CVE-2023-50495	低危	6.3-2ubuntu0.3	ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:41e67ef532078513e518c3bc5dda8a5b411a98d4b60549461c5656e283378933 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
passwd	CVE-2023-29383	低危	1:4.8.1-2ubuntu2.2	shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
passwd	CVE-2024-56433	低危	1:4.8.1-2ubuntu2.2	shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libgcc-s1	CVE-2022-27943	低危	12.3.0-1ubuntu1~22.04.3	binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943 镜像层: sha256:c0359c5b6ede84d4a083d06d35ee77f0b338dfb17423771854d007d89953fb3e 发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
libncurses6	CVE-2023-50495	低危	6.3-2ubuntu0.3	ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:41e67ef532078513e518c3bc5dda8a5b411a98d4b60549461c5656e283378933 发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39