| bsdutils |
CVE-2026-27456 |
中危 |
1:2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| busybox |
CVE-2023-42366 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
busybox: A heap-buffer-overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
|
| busybox |
CVE-2024-58251 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
In netstat in BusyBox through 1.37.0, local users can launch of networ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
|
| busybox |
CVE-2025-46394 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
|
| busybox |
CVE-2025-60876 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
busybox: BusyBox wget: HTTP request-target allows header injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-60876
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2025-11-10 20:15 修改: 2026-06-17 09:50
|
| gzip |
CVE-2026-41991 |
中危 |
1.10-4ubuntu4.1 |
1.10-4ubuntu4.2 |
gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
|
| gzip |
CVE-2026-41992 |
中危 |
1.10-4ubuntu4.1 |
1.10-4ubuntu4.2 |
GNU gzip contains a global buffer overflow vulnerability in the LZH de ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
|
| libblkid1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libc-bin |
CVE-2026-4046 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| libc-bin |
CVE-2026-5435 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Out-of-bounds write via TSIG record processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
|
| libc-bin |
CVE-2026-6238 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
|
| libc6 |
CVE-2026-4046 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| libc6 |
CVE-2026-5435 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Out-of-bounds write via TSIG record processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
|
| libc6 |
CVE-2026-6238 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
|
| libmount1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libp11-kit0 |
CVE-2026-13757 |
中危 |
0.24.0-6build1 |
|
p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-06-29 19:16 修改: 2026-07-13 06:16
|
| libsmartcols1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| libuuid1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| locales |
CVE-2026-4046 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
|
| locales |
CVE-2026-5435 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Out-of-bounds write via TSIG record processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
|
| locales |
CVE-2026-6238 |
中危 |
2.35-0ubuntu3.13 |
|
glibc: glibc: Application crash or uninitialized memory read via crafted DNS response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
|
| mount |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| tar |
CVE-2025-45582 |
中危 |
1.34+dfsg-1ubuntu0.1.22.04.3 |
1.34+dfsg-1ubuntu0.1.22.04.4 |
tar: Tar path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
|
| tar |
CVE-2026-5704 |
中危 |
1.34+dfsg-1ubuntu0.1.22.04.3 |
1.34+dfsg-1ubuntu0.1.22.04.5 |
tar: tar: Hidden file injection via crafted archives
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
|
| util-linux |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-03 22:16 修改: 2026-06-17 10:27
|
| wget |
CVE-2021-31879 |
中危 |
1.21.2-2ubuntu1.4 |
|
wget: authorization header disclosure on redirect
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879
镜像层: sha256:e1f32bbf0478a3c51194e160e6892a42f27ecb8dbac10f9e60ffc0b63730151e
发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
|
| libstdc++6 |
CVE-2022-27943 |
低危 |
12.3.0-1ubuntu1~22.04.3 |
|
binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
|
| libsystemd0 |
CVE-2026-40228 |
低危 |
249.11-0ubuntu3.21 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libtinfo6 |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.1 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| libtinfo6 |
CVE-2025-69720 |
低危 |
6.3-2ubuntu0.1 |
6.3-2ubuntu0.2 |
ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
|
| libudev1 |
CVE-2026-40228 |
低危 |
249.11-0ubuntu3.21 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| gcc-12-base |
CVE-2022-27943 |
低危 |
12.3.0-1ubuntu1~22.04.3 |
|
binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
|
| libzstd1 |
CVE-2022-4899 |
低危 |
1.4.8+dfsg-3build1 |
|
zstd: mysql: buffer overrun in util.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22
|
| libncurses6 |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.1 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| libncurses6 |
CVE-2025-69720 |
低危 |
6.3-2ubuntu0.1 |
6.3-2ubuntu0.2 |
ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
|
| libncursesw6 |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.1 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| login |
CVE-2023-29383 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow: Improper input validation in shadow-utils package utility chfn
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
|
| login |
CVE-2024-56433 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libncursesw6 |
CVE-2025-69720 |
低危 |
6.3-2ubuntu0.1 |
6.3-2ubuntu0.2 |
ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
|
| ncurses-base |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.1 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| ncurses-base |
CVE-2025-69720 |
低危 |
6.3-2ubuntu0.1 |
6.3-2ubuntu0.2 |
ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
|
| ncurses-bin |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.1 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| ncurses-bin |
CVE-2025-69720 |
低危 |
6.3-2ubuntu0.1 |
6.3-2ubuntu0.2 |
ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00
|
| passwd |
CVE-2023-29383 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow: Improper input validation in shadow-utils package utility chfn
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
|
| passwd |
CVE-2024-56433 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libgcc-s1 |
CVE-2022-27943 |
低危 |
12.3.0-1ubuntu1~22.04.3 |
|
binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
|
| libpcre2-8-0 |
CVE-2022-41409 |
低危 |
10.39-3ubuntu0.1 |
|
pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
|
| libpcre3 |
CVE-2017-11164 |
低危 |
2:8.39-13ubuntu0.22.04.1 |
|
pcre: OP_KETRMAX feature in the match function in pcre_exec.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2017-07-11 03:29 修改: 2026-06-17 01:01
|
| libgcrypt20 |
CVE-2024-2236 |
低危 |
1.9.4-3ubuntu3.2 |
|
libgcrypt: vulnerable to Marvin Attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236
镜像层: sha256:10f9108f6cebf96e05cadfab3c188071f3c6d084abe680fd0bc9f61c268e854d
发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
|