docker.io/container-registry.oracle.com/mysql/community-router:8.4.10-aarch64 linux/arm64

docker.io/container-registry.oracle.com/mysql/community-router:8.4.10-aarch64 - Trivy安全扫描结果 扫描时间: 2026-09-01 14:00 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:3 中危漏洞:67 高危漏洞:30 严重漏洞:0

系统OS: oracle 9.7 扫描引擎: Trivy 扫描时间: 2026-09-01 14:00

docker.io/container-registry.oracle.com/mysql/community-router:8.4.10-aarch64 (oracle 9.7) (oracle)
低危漏洞:3 中危漏洞:67 高危漏洞:30 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-1965 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

curl CVE-2026-3783 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

curl CVE-2026-8286 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

curl CVE-2026-9547 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

glib2 CVE-2025-14087 高危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.1 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-12-10 09:15 修改: 2026-08-25 10:18

glib2 CVE-2026-58016 高危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.2 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

gnutls CVE-2026-33845 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-30 18:16 修改: 2026-08-31 15:17

gnutls CVE-2026-33846 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-04 10:15 修改: 2026-08-31 15:17

gnutls CVE-2026-3832 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-30 18:16 修改: 2026-08-31 16:17

gnutls CVE-2026-3833 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-30 18:16 修改: 2026-08-31 16:17

gnutls CVE-2026-42009 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-18 13:16 修改: 2026-08-31 15:17

gnutls CVE-2026-42010 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-07 12:16 修改: 2026-08-31 15:17

gnutls CVE-2026-42011 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-07 15:16 修改: 2026-08-31 16:18

gnutls CVE-2026-42012 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-26 22:16 修改: 2026-08-31 16:18

gnutls CVE-2026-42013 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-26 22:16 修改: 2026-08-31 16:18

gnutls CVE-2026-42014 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-16 02:16 修改: 2026-08-31 16:18

gnutls CVE-2026-42015 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-26 22:16 修改: 2026-08-31 16:18

gnutls CVE-2026-5260 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-26 22:16 修改: 2026-08-31 16:19

gnutls CVE-2026-5419 高危 3.8.3-10.el9_7 3.8.10-4.el9_8 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-01 21:16 修改: 2026-08-31 16:19

krb5-libs CVE-2026-40355 高危 1.21.1-9.0.1.el9_7 1.21.1-10.0.1.el9_8 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

krb5-libs CVE-2026-40356 高危 1.21.1-9.0.1.el9_7 1.21.1-10.0.1.el9_8 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libacl CVE-2026-54369 高危 2.3.1-4.el9 2.4.0-1.el9_8 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-29 14:16 修改: 2026-08-25 13:19

libacl CVE-2026-54370 高危 2.3.1-4.el9 2.4.0-1.el9_8 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

libcap CVE-2026-4878 高危 2.48-10.el9_7.1 2.48-10.el9_8.1 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-09 16:16 修改: 2026-08-31 15:17

libcurl CVE-2026-1965 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16

libcurl CVE-2026-3783 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44

libcurl CVE-2026-8286 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

libcurl CVE-2026-9547 高危 7.76.1-35.el9_7.3 7.76.1-40.el9_8.5 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52

sqlite-libs CVE-2026-11822 高危 3.34.1-9.el9_7 3.34.1-11.el9_8 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

sqlite-libs CVE-2026-11824 高危 3.34.1-9.el9_7 3.34.1-11.el9_8 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

glibc-minimal-langpack CVE-2026-4437 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc-minimal-langpack CVE-2026-4438 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc-minimal-langpack CVE-2026-5435 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5450 中危 2.34-231.0.1.el9_7.10 2.34-272.0.1.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5928 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-6238 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

coreutils-single CVE-2025-5278 中危 8.32-39.0.1.el9 8.32-41.0.1.el9_8 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-05-27 21:15 修改: 2026-08-31 15:17

glib2 CVE-2025-14512 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.1 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-12-11 07:16 修改: 2026-08-31 15:17

glib2 CVE-2026-15588 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.9 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-07-20 12:17 修改: 2026-08-31 16:17

glib2 CVE-2026-58010 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.9 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

glib2 CVE-2026-58011 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.9 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

glib2 CVE-2026-58012 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.9 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

glib2 CVE-2026-58013 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.9 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

glib2 CVE-2026-58014 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.9 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 13:19 修改: 2026-08-31 16:18

glib2 CVE-2026-58015 中危 2.68.4-18.el9_7.2 2.68.4-19.el9_8.9 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 13:19 修改: 2026-08-31 16:18

glibc CVE-2026-4046 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc CVE-2026-4437 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc CVE-2026-4438 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc CVE-2026-5435 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc CVE-2026-5450 中危 2.34-231.0.1.el9_7.10 2.34-272.0.1.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-5928 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-6238 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-common CVE-2026-4046 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

libarchive CVE-2026-14164 中危 3.5.3-9.el9_7 3.5.3-11.el9_8 libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14164

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-30 07:16 修改: 2026-08-31 12:17

libattr CVE-2026-54371 中危 2.5.1-3.el9 2.6.0-1.el9_8 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-29 14:16 修改: 2026-08-27 13:18

glibc-common CVE-2026-4437 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc-common CVE-2026-4438 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

glibc-common CVE-2026-5435 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-common CVE-2026-5450 中危 2.34-231.0.1.el9_7.10 2.34-272.0.1.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-5928 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libgcrypt CVE-2026-41989 中危 1.10.0-11.el9 1.10.0-13.el9_8 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18

libnghttp2 CVE-2026-58055 中危 1.43.0-6.el9_7.1 1.43.0-6.el9_8.2 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41

libsolv CVE-2026-48864 中危 0.7.24-3.el9 0.7.24-6.el9_8 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-05-26 17:16 修改: 2026-08-31 03:16

libssh CVE-2025-4877 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: Write beyond bounds in binary to base64 conversion functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4877

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-08-20 13:15 修改: 2026-08-31 12:17

libssh CVE-2025-4878 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: Use of uninitialized variable in privatekey_from_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4878

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-07-22 15:15 修改: 2026-08-31 16:17

libssh CVE-2025-5351 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: Double Free Vulnerability in libssh Key Export Functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5351

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-07-04 09:15 修改: 2026-08-31 15:17

libssh CVE-2025-8114 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: NULL Pointer Dereference in libssh KEX Session ID Calculation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8114

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-07-24 15:15 修改: 2026-08-31 15:17

libssh CVE-2025-8277 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: Memory Exhaustion via Repeated Key Exchange in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8277

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-09-09 12:15 修改: 2026-08-31 16:17

libssh CVE-2026-0964 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: Improper sanitation of paths received from SCP servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0964

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-26 21:17 修改: 2026-08-31 15:17

libssh CVE-2026-0965 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: libssh: Denial of Service via improper configuration file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0965

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-26 21:17 修改: 2026-08-31 16:17

libssh CVE-2026-0966 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: libssh: Denial of Service via zero-length input in ssh_get_hexa()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0966

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-26 21:17 修改: 2026-08-31 15:17

libssh CVE-2026-0967 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: libssh: Denial of Service via inefficient regular expression processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0967

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-26 21:17 修改: 2026-08-31 16:17

libssh CVE-2026-0968 中危 0.10.4-17.el9_7 0.10.4-18.el9 libssh: libssh: Denial of Service due to malformed SFTP message

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0968

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-26 21:17 修改: 2026-08-31 16:17

openssl-libs CVE-2026-28390 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-libs CVE-2026-31790 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-2.0.1.el9_8 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-libs CVE-2026-34180 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34181 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34182 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34183 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42764 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42766 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42767 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42768 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42769 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42770 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45445 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45446 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45447 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19

openssl-libs CVE-2026-7383 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-9076 中危 1:3.5.1-7.0.1.el9_7 1:3.5.5-4.0.1.el9_8 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

p11-kit CVE-2026-13757 中危 0.25.3-3.el9_5 0.26.4-1.el9_8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-29 19:16 修改: 2026-08-31 16:17

p11-kit CVE-2026-2100 中危 0.25.3-3.el9_5 0.26.2-1.el9 p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-26 21:17 修改: 2026-08-31 12:17

p11-kit-trust CVE-2026-13757 中危 0.25.3-3.el9_5 0.26.4-1.el9_8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-06-29 19:16 修改: 2026-08-31 16:17

p11-kit-trust CVE-2026-2100 中危 0.25.3-3.el9_5 0.26.2-1.el9 p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-26 21:17 修改: 2026-08-31 12:17

glibc-common CVE-2026-6238 中危 2.34-231.0.1.el9_7.10 2.34-274.0.1.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-4046 中危 2.34-231.0.1.el9_7.10 2.34-270.0.1.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

systemd-libs CVE-2026-29111 中危 252-55.0.3.el9_7.9 252-67.0.1.el9_8.2 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:781ad858c2f27377c37443928e418319d6fb17dbc39be401038aa91cb66fb638

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libtasn1 CVE-2025-13151 低危 4.16.0-9.el9 4.16.0-10.el9_8 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

libxml2 CVE-2024-34459 低危 2.9.13-14.el9_7 2.9.13-14.el9_8.1 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33

libxml2 CVE-2025-6170 低危 2.9.13-14.el9_7 2.9.13-14.el9_8.2 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:3c2727112ff43f2151628de1230c7b69ac1329b29acf1f3d16730eefa77a6ae8

发布日期: 2025-06-16 16:15 修改: 2026-08-31 16:17

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×