docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cubemastercli:v0.7.1 linux/amd64

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cubemastercli:v0.7.1 - Trivy安全扫描结果 扫描时间: 2026-09-18 14:16
全部漏洞信息
低危漏洞:4 中危漏洞:24 高危漏洞:4 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-18 14:16

docker.io/cube-sandbox-int.tencentcloudcr.com/cube-sandbox/cubemastercli:v0.7.1 (ubuntu 24.04) (ubuntu)
低危漏洞:4 中危漏洞:19 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc-bin CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc-bin CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc-bin CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc-bin CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6 CVE-2026-18374 中危 2.39-0ubuntu8.8 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43
libc6 CVE-2026-19499 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6 CVE-2026-19542 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-14 18:17 修改: 2026-09-14 20:16
libc6 CVE-2026-6368 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-6791 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43
libc6 CVE-2026-77117 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
libc6 CVE-2026-80489 中危 2.39-0ubuntu8.8 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-15 11:17 修改: 2026-09-15 13:16
perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17
perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.4 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 17:16 修改: 2026-09-10 18:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-08-03 16:16 修改: 2026-09-10 18:17
zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.2 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.17 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:6078cde548a521a729def2ee7875e9f65513c18f0d4bac4db817417617d7006a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
usr/local/bin/cubemastercli (gobinary)
低危漏洞:0 中危漏洞:5 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
github.com/quic-go/quic-go CVE-2025-59530 高危 v0.54.0 0.49.1, 0.54.1 github.com/quic-go/quic-go: quic-go Crash Due to Premature HANDSHAKE_DONE Frame

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59530

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2025-10-10 16:15 修改: 2026-06-17 09:46
google.golang.org/grpc CVE-2026-84304 高危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84304

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
google.golang.org/grpc CVE-2026-84445 高危 v1.80.0 1.82.2, 1.83.2, 1.85.0-dev.0.20260825072537-93e31b48545e google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84445

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2026-09-14 17:17 修改: 2026-09-14 17:17
google.golang.org/grpc GHSA-hrxh-6v49-42gf 高危 v1.80.0 1.82.1 gRPC-Go: xDS RBAC and HTTP/2 Vulnerabilities

漏洞详情: https://github.com/advisories/GHSA-hrxh-6v49-42gf

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2026-07-21 22:03 修改: 2026-07-21 22:03
golang.org/x/crypto CVE-2026-78662 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via channel request flooding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-78662

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:33
github.com/quic-go/quic-go CVE-2025-64702 中危 v0.54.0 0.57.0 github.com/quic-go/quic-go/http3: quic-go HTTP/3 QPACK Header Expansion DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64702

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2025-12-11 21:15 修改: 2026-06-17 09:55
github.com/quic-go/quic-go CVE-2026-40898 中危 v0.54.0 0.59.1 github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40898

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2026-06-04 19:16 修改: 2026-07-22 20:10
golang.org/x/crypto CVE-2026-56855 中危 v0.55.0 0.56.0 golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56855

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2026-09-02 20:17 修改: 2026-09-04 16:34
google.golang.org/grpc CVE-2026-84303 中危 v1.80.0 1.83.1 gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, th ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-84303

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 2026-09-01 19:17 修改: 2026-09-09 21:09
golang.org/x/crypto GO-2026-5932 未知 v0.55.0 The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues

漏洞详情:

镜像层: sha256:c894edf259f295a93f2d604df7064b73b7db2f15ab1ecc2b72b3dd63462bdb60

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
usr/local/bin/cubeopscli (gobinary)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×