docker.io/easzlab/kubeasz:3.6.5 linux/amd64

docker.io/easzlab/kubeasz:3.6.5 - Trivy安全扫描结果 扫描时间: 2024-11-15 18:07
全部漏洞信息
低危漏洞:8 中危漏洞:62 高危漏洞:16 严重漏洞:9

系统OS: alpine 3.17.3 扫描引擎: Trivy 扫描时间: 2024-11-15 18:07

docker.io/easzlab/kubeasz:3.6.5 (alpine 3.17.3) (alpine)
低危漏洞:4 中危漏洞:50 高危漏洞:12 严重漏洞:9
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
krb5-libs CVE-2024-37371 严重 1.20.1-r0 1.20.2-r1 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-06-28 23:15 修改: 2024-09-18 12:39
libexpat CVE-2024-45491 严重 2.5.0-r0 2.6.3-r0 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libexpat CVE-2024-45492 严重 2.5.0-r0 2.6.3-r0 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
openssh-client-common CVE-2023-28531 严重 9.1_p1-r2 9.1_p1-r3 openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28531

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-03-17 04:15 修改: 2024-02-12 03:15
openssh-client-common CVE-2023-38408 严重 9.1_p1-r2 9.1_p1-r4 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-20 03:15 修改: 2024-10-15 19:35
openssh-client-default CVE-2023-28531 严重 9.1_p1-r2 9.1_p1-r3 openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28531

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-03-17 04:15 修改: 2024-02-12 03:15
openssh-client-default CVE-2023-38408 严重 9.1_p1-r2 9.1_p1-r4 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-20 03:15 修改: 2024-10-15 19:35
openssh-keygen CVE-2023-28531 严重 9.1_p1-r2 9.1_p1-r3 openssh: smartcard keys to ssh-agent without the intended per-hop destination constraints.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28531

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-03-17 04:15 修改: 2024-02-12 03:15
openssh-keygen CVE-2023-38408 严重 9.1_p1-r2 9.1_p1-r4 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-20 03:15 修改: 2024-10-15 19:35
ncurses-libs CVE-2023-29491 高危 6.3_p20221119-r0 6.3_p20221119-r1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
ncurses-terminfo-base CVE-2023-29491 高危 6.3_p20221119-r0 6.3_p20221119-r1 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-04-14 01:15 修改: 2024-01-31 03:15
krb5-libs CVE-2024-37370 高危 1.20.1-r0 1.20.2-r1 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-06-28 22:15 修改: 2024-08-27 17:48
libcrypto3 CVE-2023-5363 高危 3.0.8-r3 3.0.12-r0 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-10-25 18:17 修改: 2024-10-14 15:15
openssh-client-common CVE-2024-6387 高危 9.1_p1-r2 9.1_p1-r6 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
libexpat CVE-2023-52425 高危 2.5.0-r0 2.6.0-r0 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-02-04 20:15 修改: 2024-08-26 20:35
libexpat CVE-2024-28757 高危 2.5.0-r0 2.6.2-r0 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-03-10 05:15 修改: 2024-05-01 19:15
openssh-client-default CVE-2024-6387 高危 9.1_p1-r2 9.1_p1-r6 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
libexpat CVE-2024-45490 高危 2.5.0-r0 2.6.3-r0 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
libssl3 CVE-2023-5363 高危 3.0.8-r3 3.0.12-r0 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-10-25 18:17 修改: 2024-10-14 15:15
openssh-keygen CVE-2024-6387 高危 9.1_p1-r2 9.1_p1-r6 openssh: regreSSHion - race condition in SSH allows RCE/DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6387

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-07-01 13:15 修改: 2024-09-14 03:15
sqlite-libs CVE-2023-7104 高危 3.40.1-r0 3.40.1-r1 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
libcrypto3 CVE-2024-4603 中危 3.0.8-r3 3.0.13-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2024-4741 中危 3.0.8-r3 3.0.14-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcrypto3 CVE-2024-5535 中危 3.0.8-r3 3.0.14-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libcrypto3 CVE-2024-6119 中危 3.0.8-r3 3.0.15-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
busybox CVE-2023-42366 中危 1.35.0-r29 1.35.0-r30 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
busybox-binsh CVE-2023-42363 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
busybox-binsh CVE-2023-42364 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
busybox-binsh CVE-2023-42365 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
busybox-binsh CVE-2023-42366 中危 1.35.0-r29 1.35.0-r30 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
libexpat CVE-2023-52426 中危 2.5.0-r0 2.6.0-r0 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-02-04 20:15 修改: 2024-03-07 17:15
libexpat CVE-2024-50602 中危 2.5.0-r0 2.6.4-r0 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2024-10-27 05:15 修改: 2024-10-30 18:35
busybox CVE-2023-42363 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
libssl3 CVE-2023-1255 中危 3.0.8-r3 3.0.8-r4 openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1255

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-04-20 17:15 修改: 2023-09-08 17:15
libssl3 CVE-2023-2650 中危 3.0.8-r3 3.0.9-r0 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
libssl3 CVE-2023-2975 中危 3.0.8-r3 3.0.9-r2 openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2975

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-14 12:15 修改: 2024-10-14 15:15
libssl3 CVE-2023-3446 中危 3.0.8-r3 3.0.9-r3 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
libssl3 CVE-2023-3817 中危 3.0.8-r3 3.0.10-r0 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
libssl3 CVE-2023-5678 中危 3.0.8-r3 3.0.12-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl3 CVE-2023-6129 中危 3.0.8-r3 3.0.12-r2 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-09 17:15 修改: 2024-10-14 15:15
libssl3 CVE-2023-6237 中危 3.0.8-r3 3.0.12-r3 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-25 07:15 修改: 2024-11-01 15:35
libssl3 CVE-2024-0727 中危 3.0.8-r3 3.0.12-r4 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-4603 中危 3.0.8-r3 3.0.13-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-4741 中危 3.0.8-r3 3.0.14-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3 CVE-2024-5535 中危 3.0.8-r3 3.0.14-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libssl3 CVE-2024-6119 中危 3.0.8-r3 3.0.15-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
busybox CVE-2023-42364 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
krb5-libs CVE-2023-36054 中危 1.20.1-r0 1.20.2-r0 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:db35aecc3002e0bfdaebf7de7ba61314e78c0d42d7d3f8100bd28e675e2b2d8e

发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
busybox CVE-2023-42365 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
libcrypto3 CVE-2023-1255 中危 3.0.8-r3 3.0.8-r4 openssl: Input buffer over-read in AES-XTS implementation on 64 bit ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1255

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-04-20 17:15 修改: 2023-09-08 17:15
libcrypto3 CVE-2023-2650 中危 3.0.8-r3 3.0.9-r0 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-05-30 14:15 修改: 2024-02-04 09:15
openssh-client-common CVE-2023-48795 中危 9.1_p1-r2 9.1_p1-r5 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
openssh-client-common CVE-2023-51384 中危 9.1_p1-r2 9.1_p1-r5 openssh: destination constraints only apply to first PKCS#11 key

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51384

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2024-05-16 20:05
openssh-client-common CVE-2023-51385 中危 9.1_p1-r2 9.1_p1-r5 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2024-03-13 21:15
libcrypto3 CVE-2023-2975 中危 3.0.8-r3 3.0.9-r2 openssl: AES-SIV cipher implementation contains a bug that causes it to ignore empty associated data entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2975

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-14 12:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2023-3446 中危 3.0.8-r3 3.0.9-r3 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-19 12:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2023-3817 中危 3.0.8-r3 3.0.10-r0 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-07-31 16:15 修改: 2024-10-14 15:15
openssh-client-default CVE-2023-48795 中危 9.1_p1-r2 9.1_p1-r5 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
openssh-client-default CVE-2023-51384 中危 9.1_p1-r2 9.1_p1-r5 openssh: destination constraints only apply to first PKCS#11 key

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51384

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2024-05-16 20:05
openssh-client-default CVE-2023-51385 中危 9.1_p1-r2 9.1_p1-r5 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2024-03-13 21:15
libcrypto3 CVE-2023-5678 中危 3.0.8-r3 3.0.12-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2023-6129 中危 3.0.8-r3 3.0.12-r2 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-09 17:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2023-6237 中危 3.0.8-r3 3.0.12-r3 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-25 07:15 修改: 2024-11-01 15:35
openssh-keygen CVE-2023-48795 中危 9.1_p1-r2 9.1_p1-r5 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
openssh-keygen CVE-2023-51384 中危 9.1_p1-r2 9.1_p1-r5 openssh: destination constraints only apply to first PKCS#11 key

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51384

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2024-05-16 20:05
openssh-keygen CVE-2023-51385 中危 9.1_p1-r2 9.1_p1-r5 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 19:15 修改: 2024-03-13 21:15
libcrypto3 CVE-2024-0727 中危 3.0.8-r3 3.0.12-r4 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
ssl_client CVE-2023-42363 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
ssl_client CVE-2023-42364 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
ssl_client CVE-2023-42365 中危 1.35.0-r29 1.35.0-r31 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
ssl_client CVE-2023-42366 中危 1.35.0-r29 1.35.0-r30 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
libcrypto3 CVE-2024-2511 低危 3.0.8-r3 3.0.12-r5 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-2511 低危 3.0.8-r3 3.0.12-r5 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-9143 低危 3.0.8-r3 3.0.15-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
libcrypto3 CVE-2024-9143 低危 3.0.8-r3 3.0.15-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:f1417ff83b319fbdae6dd9cd6d8c9c88002dcd75ecf6ec201c8c6894681cf2b5

发布日期: 2024-10-16 17:15 修改: 2024-11-08 16:35
Python (python-pkg)
低危漏洞:4 中危漏洞:12 高危漏洞:4 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
cryptography CVE-2023-38325 高危 40.0.2 41.0.2 python-cryptography: SSH certificate encoding/parsing incompatibility with OpenSSH

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38325

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-07-14 20:15 修改: 2024-09-05 16:09
cryptography CVE-2023-50782 高危 40.0.2 42.0.0 python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50782

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-02-05 21:15 修改: 2024-09-27 19:15
cryptography CVE-2024-26130 高危 40.0.2 42.0.4 python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26130

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-02-21 17:15 修改: 2024-02-22 19:07
setuptools CVE-2024-6345 高危 65.5.1 70.0.0 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:c45401fc392cf294760e44b9801cedea9b963c1d5d423fa672116111ed734691

发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
ansible-core CVE-2023-5764 中危 2.14.4 2.16.1, 2.15.8, 2.14.12 ansible: Template Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5764

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-12 22:15 修改: 2024-09-16 17:16
ansible-core CVE-2024-0690 中危 2.14.4 2.14.14, 2.16.3, 2.15.9 ansible-core: possible information leak in tasks that ignore ANSIBLE_NO_LOG configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0690

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-02-06 12:15 修改: 2024-05-22 17:16
ansible-core CVE-2024-8775 中危 2.14.4 ansible-core: Exposure of Sensitive Information in Ansible Vault Files Due to Improper Logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8775

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-09-14 03:15 修改: 2024-11-06 20:15
ansible-core CVE-2024-9902 中危 2.14.4 2.14.18rc1, 2.15.13rc1, 2.16.13rc1, 2.17.6rc1, 2.18.0rc2 ansible-core: Ansible-core user may read/write unauthorized content

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9902

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-11-06 10:15 修改: 2024-11-06 20:15
Jinja2 CVE-2024-22195 中危 3.1.2 3.1.3 jinja2: HTML attribute injection when passing user input as keys to xmlattr filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22195

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-01-11 03:15 修改: 2024-01-27 03:15
Jinja2 CVE-2024-34064 中危 3.1.2 3.1.4 jinja2: accepts keys containing non-attribute characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34064

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-05-06 15:15 修改: 2024-06-10 18:15
ansible CVE-2023-5115 中危 7.4.0 8.5.0 Ansible: malicious role archive can cause ansible-galaxy to overwrite arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5115

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-12-18 14:15 修改: 2024-09-16 15:15
cryptography CVE-2023-49083 中危 40.0.2 41.0.6 python-cryptography: NULL-dereference when loading PKCS7 certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49083

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-11-29 19:15 修改: 2024-09-05 16:09
cryptography CVE-2024-0727 中危 40.0.2 42.0.2 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
cryptography GHSA-h4gh-qq45-vh27 中危 40.0.2 43.0.1 pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-h4gh-qq45-vh27

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
pip CVE-2023-5752 中危 23.1 23.3 pip: Mercurial configuration injectable in repo revision when installing via pip

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-10-25 18:17 修改: 2024-06-10 18:15
ansible-core CVE-2023-4237 中危 2.14.4 platform: ec2_key module prints out the private key directly to the standard output

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4237

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2023-10-04 15:15 修改: 2023-12-01 12:15
cryptography GHSA-jm77-qphf-c4w8 低危 40.0.2 41.0.3 pyca/cryptography's wheels include vulnerable OpenSSL

漏洞详情: https://github.com/advisories/GHSA-jm77-qphf-c4w8

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
cryptography GHSA-v8gr-m533-ghj9 低危 40.0.2 41.0.4 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-v8gr-m533-ghj9

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
ansible-core CVE-2024-11079 低危 2.14.4 ansible-core: Unsafe Tagging Bypass via hostvars Object in Ansible-Core

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11079

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 2024-11-12 00:15 修改: 2024-11-12 13:55
cryptography GHSA-5cpq-8wj7-hf2v 低危 40.0.2 41.0.0 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-5cpq-8wj7-hf2v

镜像层: sha256:16d2ad51cdeaba5cebe8c529a579188ab53a94aa7f05f0c1f3474263c2ad340b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00