| bsdutils |
CVE-2026-27456 |
中危 |
1:2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| busybox |
CVE-2023-42366 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
busybox: A heap-buffer-overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23
|
| busybox |
CVE-2024-58251 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
In netstat in BusyBox through 1.37.0, local users can launch of networ ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14
|
| busybox |
CVE-2025-46394 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26
|
| busybox |
CVE-2025-60876 |
中危 |
1:1.30.1-7ubuntu3.1 |
|
busybox: BusyBox wget: HTTP request-target allows header injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-60876
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2025-11-10 20:15 修改: 2026-06-17 09:50
|
| diffutils |
CVE-2026-53910 |
中危 |
1:3.8-0ubuntu2 |
|
diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
|
| libattr1 |
CVE-2026-54371 |
中危 |
1:2.5.1-1build1 |
|
attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-06-29 14:16 修改: 2026-08-27 13:18
|
| libblkid1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| libmount1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| libp11-kit0 |
CVE-2026-13757 |
中危 |
0.24.0-6build1 |
0.24.0-6ubuntu0.1 |
p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
|
| libp11-kit0 |
CVE-2026-18938 |
中危 |
0.24.0-6build1 |
0.24.0-6ubuntu0.1 |
p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
|
| libsmartcols1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| libssl3 |
CVE-2026-63072 |
中危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-63076 |
中危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libuuid1 |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| mount |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| openssl |
CVE-2026-63072 |
中危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| openssl |
CVE-2026-63076 |
中危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| perl-base |
CVE-2026-12087 |
中危 |
5.34.0-3ubuntu1.7 |
5.34.0-3ubuntu1.8 |
perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
|
| perl-base |
CVE-2026-13221 |
中危 |
5.34.0-3ubuntu1.7 |
5.34.0-3ubuntu1.8 |
perl: Perl: Incorrect regular expression processing via large regular expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
|
| perl-base |
CVE-2026-57432 |
中危 |
5.34.0-3ubuntu1.7 |
5.34.0-3ubuntu1.8 |
perl: Perl: Information disclosure via integer overflow in pack/unpack operations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
|
| perl-base |
CVE-2026-57433 |
中危 |
5.34.0-3ubuntu1.7 |
5.34.0-3ubuntu1.8 |
Storable: Storable: Denial of Service via signed integer overflow in deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
|
| tar |
CVE-2026-18477 |
中危 |
1.34+dfsg-1ubuntu0.1.22.04.6 |
|
tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-03 17:16 修改: 2026-08-21 13:16
|
| tar |
CVE-2026-18508 |
中危 |
1.34+dfsg-1ubuntu0.1.22.04.6 |
|
tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-03 16:16 修改: 2026-08-21 13:16
|
| util-linux |
CVE-2026-27456 |
中危 |
2.37.2-4ubuntu3.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| wget |
CVE-2021-31879 |
中危 |
1.21.2-2ubuntu1.5 |
|
wget: authorization header disclosure on redirect
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
|
| libudev1 |
CVE-2026-40228 |
低危 |
249.11-0ubuntu3.22 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libgcc-s1 |
CVE-2022-27943 |
低危 |
12.3.0-1ubuntu1~22.04.3 |
|
binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
|
| libzstd1 |
CVE-2022-4899 |
低危 |
1.4.8+dfsg-3build1 |
|
zstd: mysql: buffer overrun in util.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22
|
| login |
CVE-2023-29383 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow: Improper input validation in shadow-utils package utility chfn
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
|
| login |
CVE-2024-56433 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libgcrypt20 |
CVE-2024-2236 |
低危 |
1.9.4-3ubuntu3.2 |
|
libgcrypt: vulnerable to Marvin Attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
|
| ncurses-base |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.2 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| ncurses-bin |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.2 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| libpcre2-8-0 |
CVE-2022-41409 |
低危 |
10.39-3ubuntu0.1 |
|
pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
|
| gcc-12-base |
CVE-2022-27943 |
低危 |
12.3.0-1ubuntu1~22.04.3 |
|
binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
|
| openssl |
CVE-2026-54874 |
低危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| openssl |
CVE-2026-63074 |
低危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| openssl |
CVE-2026-75803 |
低危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:7a37de6195d0aef814643803fb4007aa850057cd03d3bd3be08605e0a334dceb
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| passwd |
CVE-2023-29383 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow: Improper input validation in shadow-utils package utility chfn
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
|
| passwd |
CVE-2024-56433 |
低危 |
1:4.8.1-2ubuntu2.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libncurses6 |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.2 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| libncursesw6 |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.2 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|
| libssl3 |
CVE-2026-54874 |
低危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-63074 |
低危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libssl3 |
CVE-2026-75803 |
低危 |
3.0.2-0ubuntu1.26 |
3.0.2-0ubuntu1.29 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
|
| libstdc++6 |
CVE-2022-27943 |
低危 |
12.3.0-1ubuntu1~22.04.3 |
|
binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37
|
| libsystemd0 |
CVE-2026-40228 |
低危 |
249.11-0ubuntu3.22 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libtinfo6 |
CVE-2023-50495 |
低危 |
6.3-2ubuntu0.2 |
|
ncurses: segmentation fault via _nc_wrap_entry()
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495
镜像层: sha256:bf05b9274099653dfa3f182aeace25591e8de4215f625d8f58da1fba0e34036a
发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39
|