docker.io/bellsoft/liberica-openjdk-rocky:21.0.12-cds linux/amd64

docker.io/bellsoft/liberica-openjdk-rocky:21.0.12-cds - Trivy安全扫描结果 扫描时间: 2026-08-27 17:04
全部漏洞信息
低危漏洞:3 中危漏洞:38 高危漏洞:56 严重漏洞:0

系统OS: rocky 9.8 扫描引擎: Trivy 扫描时间: 2026-08-27 17:04

docker.io/bellsoft/liberica-openjdk-rocky:21.0.12-cds (rocky 9.8) (rocky)
低危漏洞:3 中危漏洞:38 高危漏洞:56 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-1965 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
curl CVE-2026-3783 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl CVE-2026-8286 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl CVE-2026-9547 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
glib2 CVE-2026-58016 高危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.2 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
gnutls CVE-2026-33845 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-30 18:16 修改: 2026-08-26 22:16
gnutls CVE-2026-33846 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-04 10:15 修改: 2026-08-26 22:16
gnutls CVE-2026-3832 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-30 18:16 修改: 2026-08-25 10:18
gnutls CVE-2026-3833 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-30 18:16 修改: 2026-08-26 23:17
gnutls CVE-2026-42009 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-18 13:16 修改: 2026-08-26 17:16
gnutls CVE-2026-42010 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-07 12:16 修改: 2026-08-26 17:16
gnutls CVE-2026-42011 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-07 15:16 修改: 2026-08-26 17:17
gnutls CVE-2026-42012 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18
gnutls CVE-2026-42013 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-26 22:16 修改: 2026-08-26 17:17
gnutls CVE-2026-42014 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-16 02:16 修改: 2026-08-25 10:18
gnutls CVE-2026-42015 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18
gnutls CVE-2026-5260 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-26 22:16 修改: 2026-08-26 17:17
gnutls CVE-2026-5419 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-01 21:16 修改: 2026-08-25 10:18
libacl CVE-2026-54369 高危 2.3.1-4.el9 2.4.0-1.el9_8 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-29 14:16 修改: 2026-08-25 13:19
libacl CVE-2026-54370 高危 2.3.1-4.el9 2.4.0-1.el9_8 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
libcurl CVE-2026-1965 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl CVE-2026-3783 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl CVE-2026-8286 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl CVE-2026-9547 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
openssl CVE-2026-34180 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-34181 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-34182 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-34183 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42764 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42766 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42767 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42768 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42769 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42770 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-45445 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-45446 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-45447 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19
openssl CVE-2026-7383 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-9076 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34180 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34181 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34182 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34183 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42764 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42766 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42767 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42768 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42769 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42770 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45445 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45446 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45447 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19
openssl-libs CVE-2026-7383 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-9076 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
sqlite-libs CVE-2026-11822 高危 3.34.1-9.el9_7 3.34.1-11.el9_8 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
sqlite-libs CVE-2026-11824 高危 3.34.1-9.el9_7 3.34.1-11.el9_8 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libsolv CVE-2026-48864 中危 0.7.24-4.el9 0.7.24-6.el9_8 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-05-26 17:16 修改: 2026-08-26 23:17
glibc-common CVE-2026-5450 中危 2.34-266.el9_8 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-5928 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-6238 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-4046 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-minimal-langpack CVE-2026-4437 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-minimal-langpack CVE-2026-4438 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-minimal-langpack CVE-2026-5435 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-5450 中危 2.34-266.el9_8 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-5928 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-6238 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
coreutils-single CVE-2025-5278 中危 8.32-40.el9 8.32-41.el9_8 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2025-05-27 21:15 修改: 2026-08-25 10:18
glib2 CVE-2026-15588 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-07-20 12:17 修改: 2026-08-25 10:18
glib2 CVE-2026-58010 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
glib2 CVE-2026-58011 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
glib2 CVE-2026-58012 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
openssl CVE-2026-28390 中危 1:3.5.5-2.el9_8 1:3.5.5-3.el9_8 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
glib2 CVE-2026-58013 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
glib2 CVE-2026-58014 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
glib2 CVE-2026-58015 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
glibc CVE-2026-4046 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc CVE-2026-4437 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2026-4438 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2026-5435 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc CVE-2026-5450 中危 2.34-266.el9_8 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc CVE-2026-5928 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc CVE-2026-6238 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libarchive CVE-2026-14164 中危 3.5.3-9.el9_7 3.5.3-11.el9_8 libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14164

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-30 07:16 修改: 2026-08-25 10:18
glibc-common CVE-2026-4046 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-4437 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-4438 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-5435 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
openssl-libs CVE-2026-28390 中危 1:3.5.5-2.el9_8 1:3.5.5-3.el9_8 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
p11-kit CVE-2026-13757 中危 0.26.2-1.el9 0.26.4-1.el9_8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
p11-kit-trust CVE-2026-13757 中危 0.26.2-1.el9 0.26.4-1.el9_8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
libgcrypt CVE-2026-41989 中危 1.10.0-11.el9 1.10.0-13.el9_8 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18
libnghttp2 CVE-2026-58055 中危 1.43.0-6.el9_7.1 1.43.0-6.el9_8.2 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
systemd-libs CVE-2026-29111 中危 252-67.el9.rocky.0.1 252-67.el9_8.2.rocky.0.1 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
libxml2 CVE-2024-34459 低危 2.9.13-14.el9_7 2.9.13-14.el9_8.1 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33
libxml2 CVE-2025-6170 低危 2.9.13-14.el9_7 2.9.13-14.el9_8.2 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2025-06-16 16:15 修改: 2026-08-25 10:18
libtasn1 CVE-2025-13151 低危 4.16.0-9.el9 4.16.0-10.el9_8 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:ecc5f29fbc206d37bd361227aa207de7af6f26f7ddb8c46dd7ae1e6238354617

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×