docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-pvm-host-bootstrap:v0.7.1 linux/amd64

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-pvm-host-bootstrap:v0.7.1 - Trivy安全扫描结果 扫描时间: 2026-09-18 11:53
全部漏洞信息
低危漏洞:9 中危漏洞:38 高危漏洞:0 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-18 11:53

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cube-pvm-host-bootstrap:v0.7.1 (ubuntu 24.04) (ubuntu)
低危漏洞:9 中危漏洞:38 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-18924 中危 8.5.0-2ubuntu10.13 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-19931 中危 8.5.0-2ubuntu10.13 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc-bin CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc-bin CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libc-bin CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc6 CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc6 CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16

libc6 CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libc6 CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16

libcurl4t64 CVE-2026-13608 中危 8.5.0-2ubuntu10.13 A flaw in the libcurl SASL negotiation for LDAP authentication allows ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-18924 中危 8.5.0-2ubuntu10.13 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-19931 中危 8.5.0-2ubuntu10.13 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-80230 中危 8.5.0-2ubuntu10.13 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that di ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-82209 中危 8.5.0-2ubuntu10.13 When libpsl support is enabled, libcurl fails to enforce the Public Su ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libperl5.38t64 CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

libperl5.38t64 CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.7 3.45.1-1ubuntu2.8 Buffer Overflow vulnerability in SQLite affected version source s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04

libxml2 CVE-2026-74860 中危 2.9.14+dfsg-1.3ubuntu3.8 libxml2: double-free/UAF in libxml2 Python bindings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74860

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-08 12:16 修改: 2026-09-10 20:17

libxml2 CVE-2026-86140 中危 2.9.14+dfsg-1.3ubuntu3.8 libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86140

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:39

perl CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

perl-modules-5.38 CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl-modules-5.38 CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17

tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17

zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41

libdw1t64 CVE-2025-1352 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38

libdw1t64 CVE-2025-1376 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

libelf1t64 CVE-2025-1352 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38

libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libelf1t64 CVE-2025-1376 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

libicu74 CVE-2025-5222 低危 74.2-1ubuntu3.1 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:2bf51b3a9d439d6ec5e22a01301b5fda771a991143cdbf9a004bdc14d43e8f2e

发布日期: 2025-05-27 21:15 修改: 2026-09-03 15:17

login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×