docker.io/clickhouse:26.3.33.24 linux/amd64

docker.io/clickhouse:26.3.33.24 - Trivy安全扫描结果 扫描时间: 2026-09-14 09:04
全部漏洞信息
低危漏洞:16 中危漏洞:23 高危漏洞:0 严重漏洞:0

系统OS: ubuntu 22.04 扫描引擎: Trivy 扫描时间: 2026-09-14 09:04

docker.io/clickhouse:26.3.33.24 (ubuntu 22.04) (ubuntu)
低危漏洞:16 中危漏洞:23 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
busybox CVE-2023-42366 中危 1:1.30.1-7ubuntu3.1 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:650d5fbe48cac5339e332db2fccbe6af7d5e788fa4f0fff30e2357128810f1fd

发布日期: 2023-11-27 23:15 修改: 2026-06-17 06:23

busybox CVE-2024-58251 中危 1:1.30.1-7ubuntu3.1 In netstat in BusyBox through 1.37.0, local users can launch of networ ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-58251

镜像层: sha256:650d5fbe48cac5339e332db2fccbe6af7d5e788fa4f0fff30e2357128810f1fd

发布日期: 2025-04-23 18:16 修改: 2026-06-17 08:14

busybox CVE-2025-46394 中危 1:1.30.1-7ubuntu3.1 In tar in BusyBox through 1.37.0, a TAR archive can have filenames hid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46394

镜像层: sha256:650d5fbe48cac5339e332db2fccbe6af7d5e788fa4f0fff30e2357128810f1fd

发布日期: 2025-04-23 16:15 修改: 2026-06-17 09:26

busybox CVE-2025-60876 中危 1:1.30.1-7ubuntu3.1 busybox: BusyBox wget: HTTP request-target allows header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-60876

镜像层: sha256:650d5fbe48cac5339e332db2fccbe6af7d5e788fa4f0fff30e2357128810f1fd

发布日期: 2025-11-10 20:15 修改: 2026-06-17 09:50

libc-bin CVE-2026-18374 中危 2.35-0ubuntu3.14 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-19542 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libc-bin CVE-2026-6368 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-6791 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-77117 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libc-bin CVE-2026-80489 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libc6 CVE-2026-18374 中危 2.35-0ubuntu3.14 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc6 CVE-2026-19542 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libc6 CVE-2026-6368 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-6791 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-77117 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libc6 CVE-2026-80489 中危 2.35-0ubuntu3.14 2.35-0ubuntu3.15 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

locales CVE-2026-18374 中危 2.35-0ubuntu3.15 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:650d5fbe48cac5339e332db2fccbe6af7d5e788fa4f0fff30e2357128810f1fd

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

perl-base CVE-2026-15534 中危 5.34.0-3ubuntu1.8 5.34.0-3ubuntu1.9 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl-base CVE-2026-19487 中危 5.34.0-3ubuntu1.8 5.34.0-3ubuntu1.9 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

tar CVE-2026-18477 中危 1.34+dfsg-1ubuntu0.1.22.04.6 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17

tar CVE-2026-18508 中危 1.34+dfsg-1ubuntu0.1.22.04.6 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17

wget CVE-2021-31879 中危 1.21.2-2ubuntu1.5 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:650d5fbe48cac5339e332db2fccbe6af7d5e788fa4f0fff30e2357128810f1fd

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

zlib1g CVE-2026-85091 中危 1:1.2.11.dfsg-2ubuntu9.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41

libtinfo6 CVE-2023-50495 低危 6.3-2ubuntu0.3 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libudev1 CVE-2026-40228 低危 249.11-0ubuntu3.22 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libzstd1 CVE-2022-4899 低危 1.4.8+dfsg-3build1 zstd: mysql: buffer overrun in util.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22

gcc-12-base CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

login CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

login CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

ncurses-base CVE-2023-50495 低危 6.3-2ubuntu0.3 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

ncurses-bin CVE-2023-50495 低危 6.3-2ubuntu0.3 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

passwd CVE-2023-29383 低危 1:4.8.1-2ubuntu2.2 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49

passwd CVE-2024-56433 低危 1:4.8.1-2ubuntu2.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libgcc-s1 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libncurses6 CVE-2023-50495 低危 6.3-2ubuntu0.3 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libncursesw6 CVE-2023-50495 低危 6.3-2ubuntu0.3 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-12-12 15:15 修改: 2026-06-17 06:39

libpcre2-8-0 CVE-2022-41409 低危 10.39-3ubuntu0.1 pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03

libstdc++6 CVE-2022-27943 低危 12.3.0-1ubuntu1~22.04.3 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2022-03-26 13:15 修改: 2026-06-17 04:37

libsystemd0 CVE-2026-40228 低危 249.11-0ubuntu3.22 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:ea16cace89338c84eb6bcb91a7efdfcae6838fff359efe951858227436486c34

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×