docker.io/grafana/grafana:6.0.1 linux/amd64

docker.io/grafana/grafana:6.0.1 - Trivy安全扫描结果 扫描时间: 2024-11-07 15:04
全部漏洞信息
低危漏洞:58 中危漏洞:68 高危漏洞:131 严重漏洞:29

系统OS: debian 9.8 扫描引擎: Trivy 扫描时间: 2024-11-07 15:04

docker.io/grafana/grafana:6.0.1 (debian 9.8) (debian)
低危漏洞:58 中危漏洞:68 高危漏洞:131 严重漏洞:29
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2019-5481 严重 7.52.1-5+deb9u9 7.52.1-5+deb9u10 curl: double free due to subsequent call of realloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5481

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-16 19:15 修改: 2023-11-07 03:11

curl CVE-2019-5482 严重 7.52.1-5+deb9u9 7.52.1-5+deb9u10 curl: heap buffer overflow in function tftp_receive_packet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5482

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-16 19:15 修改: 2023-11-07 03:11

dpkg CVE-2022-1664 严重 1.18.25 1.18.26 Dpkg::Source::Archive in dpkg, the Debian package management system, b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-05-26 14:15 修改: 2022-12-03 02:19

libbz2-1.0 CVE-2019-12900 严重 1.0.6-8.1 bzip2: out-of-bounds write in function BZ2_decompress

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-06-19 23:15 修改: 2023-11-07 03:03

libcurl3 CVE-2019-5481 严重 7.52.1-5+deb9u9 7.52.1-5+deb9u10 curl: double free due to subsequent call of realloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5481

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-16 19:15 修改: 2023-11-07 03:11

libcurl3 CVE-2019-5482 严重 7.52.1-5+deb9u9 7.52.1-5+deb9u10 curl: heap buffer overflow in function tftp_receive_packet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5482

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-16 19:15 修改: 2023-11-07 03:11

libdb5.3 CVE-2019-8457 严重 5.3.28-12+deb9u1 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-05-30 16:29 修改: 2023-11-07 03:13

libexpat1 CVE-2022-22822 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-10 14:12 修改: 2022-10-06 15:29

libexpat1 CVE-2022-22823 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47

libexpat1 CVE-2022-22824 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47

libexpat1 CVE-2022-23852 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-24 02:15 修改: 2022-10-29 02:44

libexpat1 CVE-2022-25235 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-02-16 01:15 修改: 2023-11-07 03:44

libexpat1 CVE-2022-25236 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-02-16 01:15 修改: 2023-11-07 03:44

libexpat1 CVE-2022-25315 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44

libfreetype6 CVE-2022-27404 严重 2.6.3-3.2 FreeType: Buffer overflow in sfnt_init_face

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-04-22 14:15 修改: 2024-02-29 01:34

libidn11 CVE-2017-14062 严重 1.33-1 1.33-1+deb9u1 libidn2: Integer overflow in puny_decode.c/decode_digit

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14062

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2017-08-31 16:29 修改: 2020-12-07 20:17

libldap-2.4-2 CVE-2022-29155 严重 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u9 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-05-04 20:15 修改: 2022-10-06 15:56

libldap-common CVE-2022-29155 严重 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u9 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-05-04 20:15 修改: 2022-10-06 15:56

liblz4-1 CVE-2021-3520 严重 0.0~r131-2+b1 0.0~r131-2+deb9u1 lz4: memory corruption due to an integer overflow bug caused by memmove argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3520

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-06-02 13:15 修改: 2024-06-06 20:25

libpng16-16 CVE-2017-12652 严重 1.6.28-1 libpng: does not check length of chunks against user limit

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12652

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-07-10 15:15 修改: 2023-11-07 02:38

libssh2-1 CVE-2019-3858 严重 1.7.0-1 1.7.0-1+deb9u1 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3858

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-21 21:29 修改: 2023-11-07 03:10

libssh2-1 CVE-2019-3859 严重 1.7.0-1 1.7.0-1+deb9u1 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3859

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-21 16:01 修改: 2023-11-07 03:10

libssh2-1 CVE-2019-3860 严重 1.7.0-1 1.7.0-1+deb9u1 libssh2: Out-of-bounds reads with specially crafted SFTP packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3860

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-25 19:29 修改: 2023-11-07 03:10

libssh2-1 CVE-2019-3861 严重 1.7.0-1 1.7.0-1+deb9u1 libssh2: Out-of-bounds reads with specially crafted SSH packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3861

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-25 19:29 修改: 2023-11-07 03:10

libssh2-1 CVE-2019-3862 严重 1.7.0-1 1.7.0-1+deb9u1 libssh2: Out-of-bounds memory comparison with specially crafted message channel request

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3862

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-21 16:01 修改: 2023-11-07 03:10

libssl1.1 CVE-2022-1292 严重 1.1.0j-1~deb9u1 1.1.0l-1~deb9u6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-05-03 16:15 修改: 2023-11-07 03:41

login CVE-2017-12424 严重 1:4.4-4.1 1:4.4-4.1+deb9u1 shadow-utils: Buffer overflow via newusers tool

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12424

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-08-04 09:29 修改: 2021-03-23 20:02

openssl CVE-2022-1292 严重 1.1.0j-1~deb9u1 1.1.0l-1~deb9u6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-05-03 16:15 修改: 2023-11-07 03:41

passwd CVE-2017-12424 严重 1:4.4-4.1 1:4.4-4.1+deb9u1 shadow-utils: Buffer overflow via newusers tool

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12424

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-08-04 09:29 修改: 2021-03-23 20:02

curl CVE-2021-22946 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u16 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12

bsdutils CVE-2016-2779 高危 1:2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

e2fslibs CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41

e2fsprogs CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41

gcc-6-base CVE-2018-12886 高危 6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-05-22 19:29 修改: 2020-08-24 17:37

gpgv CVE-2018-1000858 高危 2.1.18-8~deb9u4 gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000858

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-12-20 17:29 修改: 2019-02-13 16:43

libexpat1 CVE-2018-20843 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u2 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20843

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-06-24 17:15 修改: 2023-11-07 02:56

libexpat1 CVE-2019-15903 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u3 expat: heap-based buffer over-read via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15903

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-04 06:15 修改: 2023-11-07 03:05

libexpat1 CVE-2021-45960 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-01 19:15 修改: 2022-10-06 19:08

libexpat1 CVE-2021-46143 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-06 04:15 修改: 2022-10-06 19:11

libexpat1 CVE-2022-22825 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-10 14:12 修改: 2022-10-06 14:47

libexpat1 CVE-2022-22826 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-10 14:12 修改: 2022-10-06 12:44

libexpat1 CVE-2022-22827 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-10 14:12 修改: 2022-10-06 12:52

libexpat1 CVE-2022-23990 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-26 19:15 修改: 2023-11-07 03:44

libfdisk1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

gzip CVE-2022-1271 高危 1.6-5+b1 1.6-5+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-08-31 16:15 修改: 2024-08-26 10:47

libfreetype6 CVE-2022-27405 高危 2.6.3-3.2 FreeType: Segmentation violation via FNT_Size_Request

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-04-22 14:15 修改: 2024-02-29 01:34

libfreetype6 CVE-2022-27406 高危 2.6.3-3.2 Freetype: Segmentation violation via FT_Request_Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-04-22 14:15 修改: 2024-02-29 01:34

libgcc1 CVE-2018-12886 高危 1:6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-05-22 19:29 修改: 2020-08-24 17:37

libgcrypt20 CVE-2021-33560 高危 1.7.6-2+deb9u3 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-06-08 11:15 修改: 2023-11-07 03:35

libgmp10 CVE-2021-43618 高危 2:6.1.2+dfsg-1 2:6.1.2+dfsg-1+deb9u1 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-11-15 04:15 修改: 2023-09-29 15:15

libgnutls30 CVE-2019-3829 高危 3.5.8-5+deb9u4 3.5.8-5+deb9u5 gnutls: use-after-free/double-free in certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3829

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-27 18:29 修改: 2023-11-07 03:10

libgssapi-krb5-2 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-11-06 08:15 修改: 2023-11-07 03:21

libhogweed4 CVE-2021-20305 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-04-05 22:15 修改: 2023-11-07 03:29

libhogweed4 CVE-2021-3580 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-05 21:15 修改: 2024-01-16 15:15

krb5-locales CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-11-06 08:15 修改: 2023-11-07 03:21

libk5crypto3 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-11-06 08:15 修改: 2023-11-07 03:21

libkrb5-3 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-11-06 08:15 修改: 2023-11-07 03:21

libkrb5support0 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-11-06 08:15 修改: 2023-11-07 03:21

libblkid1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

libldap-2.4-2 CVE-2020-12243 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u4 openldap: denial of service via nested boolean expressions in LDAP search filters

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12243

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-04-28 19:15 修改: 2022-04-29 13:24

libldap-2.4-2 CVE-2020-25692 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u5 openldap: NULL pointer dereference for unauthenticated packet in slapd

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25692

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-08 01:15 修改: 2022-10-12 14:27

libldap-2.4-2 CVE-2020-25709 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u6 openldap: assertion failure in Certificate List syntax validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25709

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-05-18 12:15 修改: 2023-11-07 03:20

libldap-2.4-2 CVE-2020-25710 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u6 openldap: assertion failure in CSN normalization with invalid input

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25710

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-05-28 11:15 修改: 2023-11-07 03:20

libldap-2.4-2 CVE-2020-36221 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36222 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36223 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36224 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36225 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36226 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36227 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36228 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36229 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2020-36230 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-2.4-2 CVE-2021-27212 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u8 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-14 03:15 修改: 2023-11-07 03:31

curl CVE-2019-5436 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u10 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5436

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-05-28 19:29 修改: 2023-11-07 03:11

libldap-common CVE-2020-12243 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u4 openldap: denial of service via nested boolean expressions in LDAP search filters

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12243

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-04-28 19:15 修改: 2022-04-29 13:24

libldap-common CVE-2020-25692 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u5 openldap: NULL pointer dereference for unauthenticated packet in slapd

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25692

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-08 01:15 修改: 2022-10-12 14:27

libldap-common CVE-2020-25709 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u6 openldap: assertion failure in Certificate List syntax validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25709

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-05-18 12:15 修改: 2023-11-07 03:20

libldap-common CVE-2020-25710 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u6 openldap: assertion failure in CSN normalization with invalid input

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25710

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-05-28 11:15 修改: 2023-11-07 03:20

libldap-common CVE-2020-36221 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36222 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36223 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36224 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36225 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36226 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36227 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36228 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36229 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2020-36230 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u7 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-01-26 18:15 修改: 2023-11-07 03:22

libldap-common CVE-2021-27212 高危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u8 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-14 03:15 修改: 2023-11-07 03:31

libcomerr2 CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41

liblzma5 CVE-2022-1271 高危 5.2.2-1.2+b1 5.2.2-1.2+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-08-31 16:15 修改: 2024-08-26 10:47

libmount1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

libncursesw5 CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46

libnettle6 CVE-2021-20305 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-04-05 22:15 修改: 2023-11-07 03:29

libnettle6 CVE-2021-3580 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-05 21:15 修改: 2024-01-16 15:15

libnghttp2-14 CVE-2018-1000168 高危 1.18.1-1 1.18.1-1+deb9u2 nghttp2: Null pointer dereference when too large ALTSVC frame is received

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000168

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-05-08 15:29 修改: 2022-08-16 13:01

libnghttp2-14 CVE-2019-9511 高危 1.18.1-1 1.18.1-1+deb9u1 HTTP/2: large amount of data requests leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9511

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-08-13 21:15 修改: 2023-11-07 03:13

libnghttp2-14 CVE-2019-9513 高危 1.18.1-1 1.18.1-1+deb9u1 HTTP/2: flood using PRIORITY frames results in excessive resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9513

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-08-13 21:15 修改: 2023-11-07 03:13

libnghttp2-14 CVE-2020-11080 高危 1.18.1-1 1.18.1-1+deb9u2 nghttp2: overly large SETTINGS frames can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11080

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-06-03 23:15 修改: 2023-11-07 03:14

libp11-kit0 CVE-2020-29361 高危 0.23.3-2 0.23.3-2+deb9u1 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-16 14:15 修改: 2023-11-07 03:21

curl CVE-2020-8177 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u11 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 16:04

libsasl2-2 CVE-2019-19906 高危 2.1.27~101-g0780600+dfsg-3 2.1.27~101-g0780600+dfsg-3+deb9u1 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-12-19 18:15 修改: 2023-11-07 03:07

libsasl2-2 CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3 2.1.27~101-g0780600+dfsg-3+deb9u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-02-24 15:15 修改: 2023-11-07 03:44

libsasl2-modules CVE-2019-19906 高危 2.1.27~101-g0780600+dfsg-3 2.1.27~101-g0780600+dfsg-3+deb9u1 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-12-19 18:15 修改: 2023-11-07 03:07

libsasl2-modules CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3 2.1.27~101-g0780600+dfsg-3+deb9u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-02-24 15:15 修改: 2023-11-07 03:44

libsasl2-modules-db CVE-2019-19906 高危 2.1.27~101-g0780600+dfsg-3 2.1.27~101-g0780600+dfsg-3+deb9u1 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-12-19 18:15 修改: 2023-11-07 03:07

libsasl2-modules-db CVE-2022-24407 高危 2.1.27~101-g0780600+dfsg-3 2.1.27~101-g0780600+dfsg-3+deb9u2 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-02-24 15:15 修改: 2023-11-07 03:44

libsmartcols1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

libss2 CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41

curl CVE-2020-8231 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u12 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 16:04

libcurl3 CVE-2019-5436 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u10 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5436

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-05-28 19:29 修改: 2023-11-07 03:11

libcurl3 CVE-2020-8177 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u11 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 16:04

libcurl3 CVE-2020-8231 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u12 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 16:04

libcurl3 CVE-2020-8285 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u13 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 15:47

libssh2-1 CVE-2019-13115 高危 1.7.0-1 1.7.0-1+deb9u2 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-07-16 18:15 修改: 2023-11-07 03:03

libssh2-1 CVE-2019-17498 高危 1.7.0-1 1.7.0-1+deb9u2 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17498

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-10-21 22:15 修改: 2023-11-07 03:06

libssh2-1 CVE-2019-3855 高危 1.7.0-1 1.7.0-1+deb9u1 libssh2: Integer overflow in transport read resulting in out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3855

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-21 21:29 修改: 2023-11-07 03:10

libssh2-1 CVE-2019-3856 高危 1.7.0-1 1.7.0-1+deb9u1 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3856

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-25 19:29 修改: 2023-11-07 03:10

libssh2-1 CVE-2019-3857 高危 1.7.0-1 1.7.0-1+deb9u1 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3857

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-25 19:29 修改: 2023-11-07 03:10

libssh2-1 CVE-2019-3863 高危 1.7.0-1 1.7.0-1+deb9u1 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3863

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-25 18:29 修改: 2023-11-07 03:10

libssl1.0.2 CVE-2021-23840 高危 1.0.2r-1~deb9u1 1.0.2u-1~deb9u4 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-16 17:15 修改: 2024-06-21 19:15

libssl1.0.2 CVE-2021-3712 高危 1.0.2r-1~deb9u1 1.0.2u-1~deb9u6 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-24 15:15 修改: 2024-06-21 19:15

libssl1.0.2 CVE-2022-0778 高危 1.0.2r-1~deb9u1 1.0.2u-1~deb9u7 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-03-15 17:15 修改: 2024-06-21 19:15

libcurl3 CVE-2020-8286 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u13 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 15:47

libssl1.1 CVE-2019-1543 高危 1.1.0j-1~deb9u1 1.1.0k-1~deb9u1 openssl: ChaCha20-Poly1305 with long nonces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1543

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-06 21:29 修改: 2023-11-07 03:08

libssl1.1 CVE-2021-23840 高危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u3 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-16 17:15 修改: 2024-06-21 19:15

libssl1.1 CVE-2021-3712 高危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u4 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-24 15:15 修改: 2024-06-21 19:15

libssl1.1 CVE-2022-0778 高危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-03-15 17:15 修改: 2024-06-21 19:15

libstdc++6 CVE-2018-12886 高危 6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-05-22 19:29 修改: 2020-08-24 17:37

libsystemd0 CVE-2018-15686 高危 232-25+deb9u9 232-25+deb9u10 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-10-26 14:29 修改: 2023-11-07 02:53

libsystemd0 CVE-2019-3842 高危 232-25+deb9u9 232-25+deb9u11 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-04-09 21:29 修改: 2023-11-07 03:10

libsystemd0 CVE-2019-3843 高危 232-25+deb9u9 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10

libsystemd0 CVE-2019-3844 高危 232-25+deb9u9 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10

libsystemd0 CVE-2020-1712 高危 232-25+deb9u9 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-03-31 17:15 修改: 2023-11-07 03:19

libtinfo5 CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46

libudev1 CVE-2018-15686 高危 232-25+deb9u9 232-25+deb9u10 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-10-26 14:29 修改: 2023-11-07 02:53

libudev1 CVE-2019-3842 高危 232-25+deb9u9 232-25+deb9u11 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-04-09 21:29 修改: 2023-11-07 03:10

libudev1 CVE-2019-3843 高危 232-25+deb9u9 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10

libudev1 CVE-2019-3844 高危 232-25+deb9u9 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-04-26 21:29 修改: 2023-11-07 03:10

libudev1 CVE-2020-1712 高危 232-25+deb9u9 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-03-31 17:15 修改: 2023-11-07 03:19

libuuid1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

libcurl3 CVE-2021-22946 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u16 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:12

login CVE-2017-20002 高危 1:4.4-4.1 1:4.4-4.1+deb9u1 The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-20002

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-03-17 06:15 修改: 2021-06-07 14:58

mount CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

ncurses-base CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46

ncurses-bin CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-04-18 21:15 修改: 2023-11-07 03:46

curl CVE-2020-8285 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u13 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 15:47

openssl CVE-2019-1543 高危 1.1.0j-1~deb9u1 1.1.0k-1~deb9u1 openssl: ChaCha20-Poly1305 with long nonces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1543

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-03-06 21:29 修改: 2023-11-07 03:08

openssl CVE-2021-23840 高危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u3 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-16 17:15 修改: 2024-06-21 19:15

openssl CVE-2021-3712 高危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u4 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-24 15:15 修改: 2024-06-21 19:15

openssl CVE-2022-0778 高危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-03-15 17:15 修改: 2024-06-21 19:15

curl CVE-2020-8286 高危 7.52.1-5+deb9u9 7.52.1-5+deb9u13 curl: Inferior OCSP verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8286

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-03-27 15:47

passwd CVE-2017-20002 高危 1:4.4-4.1 1:4.4-4.1+deb9u1 The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-20002

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-03-17 06:15 修改: 2021-06-07 14:58

perl-base CVE-2020-10543 高危 5.24.1-3+deb9u5 5.24.1-3+deb9u7 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-06-05 14:15 修改: 2023-11-07 03:14

perl-base CVE-2020-10878 高危 5.24.1-3+deb9u5 5.24.1-3+deb9u7 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-06-05 14:15 修改: 2023-11-07 03:14

perl-base CVE-2020-12723 高危 5.24.1-3+deb9u5 5.24.1-3+deb9u7 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-06-05 15:15 修改: 2023-11-07 03:15

perl-base CVE-2020-16156 高危 5.24.1-3+deb9u5 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18

util-linux CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2019-01-04 14:14

zlib1g CVE-2018-25032 高危 1:1.2.8.dfsg-5 1:1.2.8.dfsg-5+deb9u1 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-03-25 09:15 修改: 2023-11-07 02:56

e2fsprogs CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-09-24 22:15 修改: 2023-11-07 03:11

libgnutls30 CVE-2018-16868 中危 3.5.8-5+deb9u4 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16868

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-03 14:29 修改: 2022-11-30 21:20

libgnutls30 CVE-2021-4209 中危 3.5.8-5+deb9u4 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-08-24 16:15 修改: 2022-10-27 16:57

libcomerr2 CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-09-24 22:15 修改: 2023-11-07 03:11

libgssapi-krb5-2 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-26 21:29 修改: 2023-11-07 02:56

libgssapi-krb5-2 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libgssapi-krb5-2 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:52

libgssapi-krb5-2 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37

libcomerr2 CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-01-08 16:15 修改: 2023-11-07 03:11

e2fsprogs CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-01-08 16:15 修改: 2023-11-07 03:11

libhogweed4 CVE-2018-16869 中危 3.3-1+b2 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-03 14:29 修改: 2023-02-03 14:25

libssl1.0.2 CVE-2019-1547 中危 1.0.2r-1~deb9u1 1.0.2t-1~deb9u1 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-10 17:15 修改: 2024-06-21 19:15

libssl1.0.2 CVE-2019-1551 中危 1.0.2r-1~deb9u1 1.0.2u-1~deb9u1 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-12-06 18:15 修改: 2023-11-07 03:08

libssl1.0.2 CVE-2020-1971 中危 1.0.2r-1~deb9u1 1.0.2u-1~deb9u3 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-08 16:15 修改: 2024-06-21 19:15

libssl1.0.2 CVE-2021-23841 中危 1.0.2r-1~deb9u1 1.0.2u-1~deb9u4 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-16 17:15 修改: 2024-06-21 19:15

curl CVE-2021-22947 中危 7.52.1-5+deb9u9 7.52.1-5+deb9u16 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03

apt CVE-2020-3810 中危 1.4.9 1.4.10 Missing input validation in the ar/tar implementations of APT before v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-05-15 14:15 修改: 2023-11-07 03:23

libk5crypto3 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-26 21:29 修改: 2023-11-07 02:56

libk5crypto3 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libk5crypto3 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:52

libssl1.1 CVE-2019-1547 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u1 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-10 17:15 修改: 2024-06-21 19:15

libssl1.1 CVE-2019-1551 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-12-06 18:15 修改: 2023-11-07 03:08

libssl1.1 CVE-2020-1971 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u2 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-08 16:15 修改: 2024-06-21 19:15

libssl1.1 CVE-2021-23841 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u3 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-16 17:15 修改: 2024-06-21 19:15

libssl1.1 CVE-2021-4160 中危 1.1.0j-1~deb9u1 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-28 22:15 修改: 2024-06-21 19:15

libk5crypto3 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37

apt CVE-2020-27350 中危 1.4.9 1.4.11 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-12-10 04:15 修改: 2022-10-29 02:41

libkrb5-3 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-26 21:29 修改: 2023-11-07 02:56

libkrb5-3 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libkrb5-3 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:52

libkrb5-3 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37

libsystemd0 CVE-2018-1049 中危 232-25+deb9u9 232-25+deb9u10 systemd: automount: access to automounted volumes can lock up

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-02-16 21:29 修改: 2022-01-31 18:26

libsystemd0 CVE-2021-33910 中危 232-25+deb9u9 232-25+deb9u13 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-20 19:15 修改: 2023-11-07 03:35

libsystemd0 CVE-2021-3997 中危 232-25+deb9u9 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15

e2fslibs CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-09-24 22:15 修改: 2023-11-07 03:11

libkrb5support0 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-26 21:29 修改: 2023-11-07 02:56

libnettle6 CVE-2018-16869 中危 3.3-1+b2 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-03 14:29 修改: 2023-02-03 14:25

libkrb5support0 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libkrb5support0 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:52

libkrb5support0 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37

libudev1 CVE-2018-1049 中危 232-25+deb9u9 232-25+deb9u10 systemd: automount: access to automounted volumes can lock up

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-02-16 21:29 修改: 2022-01-31 18:26

libudev1 CVE-2021-33910 中危 232-25+deb9u9 232-25+deb9u13 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-20 19:15 修改: 2023-11-07 03:35

libudev1 CVE-2021-3997 中危 232-25+deb9u9 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2022-08-23 20:15 修改: 2023-05-03 12:15

krb5-locales CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-12-26 21:29 修改: 2023-11-07 02:56

krb5-locales CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libp11-kit0 CVE-2020-29362 中危 0.23.3-2 0.23.3-2+deb9u1 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-16 14:15 修改: 2021-01-11 16:50

libpcre3 CVE-2020-14155 中危 2:8.39-3 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:04

krb5-locales CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:52

libpng16-16 CVE-2019-7317 中危 1.6.28-1 1.6.28-1+deb9u1 libpng: use-after-free in png_image_free in png.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-02-04 08:29 修改: 2024-10-21 13:55

libexpat1 CVE-2022-25313 中危 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-02-18 05:15 修改: 2023-11-07 03:44

libcurl3 CVE-2021-22876 中危 7.52.1-5+deb9u9 7.52.1-5+deb9u14 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-04-01 18:15 修改: 2024-03-27 15:47

libcurl3 CVE-2021-22947 中危 7.52.1-5+deb9u9 7.52.1-5+deb9u16 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-09-29 20:15 修改: 2024-03-27 15:03

krb5-locales CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-23 05:15 修改: 2023-11-07 03:37

libapt-pkg5.0 CVE-2020-27350 中危 1.4.9 1.4.11 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-12-10 04:15 修改: 2022-10-29 02:41

openssl CVE-2019-1547 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u1 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-10 17:15 修改: 2024-06-21 19:15

openssl CVE-2019-1551 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-12-06 18:15 修改: 2023-11-07 03:08

openssl CVE-2020-1971 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u2 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-08 16:15 修改: 2024-06-21 19:15

openssl CVE-2021-23841 中危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u3 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-02-16 17:15 修改: 2024-06-21 19:15

openssl CVE-2021-4160 中危 1.1.0j-1~deb9u1 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2022-01-28 22:15 修改: 2024-06-21 19:15

libfreetype6 CVE-2020-15999 中危 2.6.3-3.2 2.6.3-3.2+deb9u2 freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15999

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-11-03 03:15 修改: 2024-07-25 17:25

libapt-pkg5.0 CVE-2020-3810 中危 1.4.9 1.4.10 Missing input validation in the ar/tar implementations of APT before v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-05-15 14:15 修改: 2023-11-07 03:23

e2fslibs CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-01-08 16:15 修改: 2023-11-07 03:11

libss2 CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-09-24 22:15 修改: 2023-11-07 03:11

libss2 CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-01-08 16:15 修改: 2023-11-07 03:11

libgcrypt20 CVE-2019-13627 中危 1.7.6-2+deb9u3 libgcrypt: ECDSA timing attack allowing private key leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-09-25 15:15 修改: 2021-07-21 11:39

tar CVE-2018-20482 中危 1.29b-1.1 1.29b-1.1+deb9u1 tar: Infinite read loop in sparse_dump_region function in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-12-26 18:29 修改: 2021-11-30 19:52

libgcrypt20 CVE-2021-40528 中危 1.7.6-2+deb9u3 1.7.6-2+deb9u4 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-09-06 19:15 修改: 2023-11-07 03:38

curl CVE-2021-22876 中危 7.52.1-5+deb9u9 7.52.1-5+deb9u14 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-04-01 18:15 修改: 2024-03-27 15:47

libsmartcols1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

libfdisk1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

libldap-common CVE-2019-13057 低危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u3 openldap: Information disclosure issue in slapd component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13057

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-07-26 13:15 修改: 2022-06-13 18:38

libldap-common CVE-2019-13565 低危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u3 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13565

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-07-26 13:15 修改: 2023-11-07 03:03

libblkid1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

libsystemd0 CVE-2018-16888 低危 232-25+deb9u9 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-01-14 22:29 修改: 2023-11-07 02:53

libsystemd0 CVE-2018-6954 低危 232-25+deb9u9 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-02-13 20:29 修改: 2023-11-07 03:00

liblz4-1 CVE-2019-17543 低危 0.0~r131-2+b1 lz4: heap-based buffer overflow in LZ4_write32

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 02:15 修改: 2023-11-07 03:06

libtinfo5 CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-11-12 19:29 修改: 2019-04-23 13:15

libtinfo5 CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-10 15:13

libtinfo5 CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-08 20:52

coreutils CVE-2016-2781 低危 8.26-3 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32

curl CVE-2020-8284 低危 7.52.1-5+deb9u9 7.52.1-5+deb9u13 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-04-08 22:50

libmount1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

libkrb5-3 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2017-09-13 16:29 修改: 2023-11-07 02:38

libncursesw5 CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-11-12 19:29 修改: 2019-04-23 13:15

libncursesw5 CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-10 15:13

libncursesw5 CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-08 20:52

libkrb5-3 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:53

libudev1 CVE-2018-16888 低危 232-25+deb9u9 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-01-14 22:29 修改: 2023-11-07 02:53

libudev1 CVE-2018-6954 低危 232-25+deb9u9 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-02-13 20:29 修改: 2023-11-07 03:00

libgssapi-krb5-2 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2017-09-13 16:29 修改: 2023-11-07 02:38

libuuid1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

libldap-2.4-2 CVE-2019-13057 低危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u3 openldap: Information disclosure issue in slapd component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13057

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-07-26 13:15 修改: 2022-06-13 18:38

libldap-2.4-2 CVE-2019-13565 低危 2.4.44+dfsg-5+deb9u2 2.4.44+dfsg-5+deb9u3 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13565

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-07-26 13:15 修改: 2023-11-07 03:03

login CVE-2018-7169 低危 1:4.4-4.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-02-15 20:29 修改: 2019-10-03 00:03

libgssapi-krb5-2 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:53

mount CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

curl CVE-2021-22898 低危 7.52.1-5+deb9u9 7.52.1-5+deb9u15 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47

ncurses-base CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-11-12 19:29 修改: 2019-04-23 13:15

ncurses-base CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-10 15:13

ncurses-base CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-08 20:52

gpgv CVE-2018-9234 低危 2.1.18-8~deb9u4 GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9234

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-04-04 00:29 修改: 2019-02-27 19:37

ncurses-bin CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-11-12 19:29 修改: 2019-04-23 13:15

ncurses-bin CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-10 15:13

ncurses-bin CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2019-10-14 21:15 修改: 2021-02-08 20:52

libcurl3 CVE-2020-8284 低危 7.52.1-5+deb9u9 7.52.1-5+deb9u13 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-12-14 20:15 修改: 2024-04-08 22:50

libkrb5support0 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2017-09-13 16:29 修改: 2023-11-07 02:38

libssl1.0.2 CVE-2019-1563 低危 1.0.2r-1~deb9u1 1.0.2t-1~deb9u1 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-10 17:15 修改: 2023-11-07 03:08

libssl1.0.2 CVE-2020-1968 低危 1.0.2r-1~deb9u1 1.0.2u-1~deb9u2 openssl: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1968

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2020-09-09 14:15 修改: 2022-11-21 19:48

libkrb5support0 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:53

libcurl3 CVE-2021-22898 低危 7.52.1-5+deb9u9 7.52.1-5+deb9u15 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-06-11 16:15 修改: 2024-03-27 15:47

libcurl3 CVE-2021-22924 低危 7.52.1-5+deb9u9 7.52.1-5+deb9u15 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11

krb5-locales CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2017-09-13 16:29 修改: 2023-11-07 02:38

krb5-locales CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:53

gpgv CVE-2019-14855 低危 2.1.18-8~deb9u4 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2020-03-20 16:15 修改: 2022-11-08 02:28

openssl CVE-2019-1563 低危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u1 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-10 17:15 修改: 2023-11-07 03:08

curl CVE-2021-22924 低危 7.52.1-5+deb9u9 7.52.1-5+deb9u15 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11

libk5crypto3 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2017-09-13 16:29 修改: 2023-11-07 02:38

passwd CVE-2018-7169 低危 1:4.4-4.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2018-02-15 20:29 修改: 2019-10-03 00:03

libk5crypto3 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2018-03-06 20:29 修改: 2024-05-23 17:53

libsepol1 CVE-2021-36084 低危 2.6-2 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36

libssl1.1 CVE-2019-1563 低危 1.1.0j-1~deb9u1 1.1.0l-1~deb9u1 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 2019-09-10 17:15 修改: 2023-11-07 03:08

libsepol1 CVE-2021-36085 低危 2.6-2 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36

libsepol1 CVE-2021-36086 低危 2.6-2 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36

libsepol1 CVE-2021-36087 低危 2.6-2 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36

util-linux CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

bsdutils CVE-2021-37600 低危 1:2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 2021-07-30 14:15 修改: 2024-08-04 02:15

libgnutls30 DLA-2759-1 未知 3.5.8-5+deb9u4 3.5.8-5+deb9u6 gnutls28 - security update

漏洞详情:

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2424-1 未知 2018i-0+deb9u1 2020d-0+deb9u1 tzdata - new upstream version

漏洞详情:

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2509-1 未知 2018i-0+deb9u1 2020e-0+deb9u1 tzdata - new upstream version

漏洞详情:

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2542-1 未知 2018i-0+deb9u1 2021a-0+deb9u1 tzdata - new upstream version

漏洞详情:

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2797-1 未知 2018i-0+deb9u1 2021a-0+deb9u2 tzdata - new upstream version

漏洞详情:

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2963-1 未知 2018i-0+deb9u1 2021a-0+deb9u3 tzdata - new timezone database

漏洞详情:

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3051-1 未知 2018i-0+deb9u1 2021a-0+deb9u4 tzdata - new timezone database

漏洞详情:

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

debian-archive-keyring DLA-2948-1 未知 2017.5 2017.5+deb9u2 debian-archive-keyring - security update

漏洞详情:

镜像层: sha256:6744ca1b11903f4db4d5e26145f6dd20f9a6d321a7f725f1a0a7a45a4174c579

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libssl1.0.2 DLA-2761-1 未知 1.0.2r-1~deb9u1 1.0.2u-1~deb9u5 openssl1.0 - security update

漏洞详情:

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

ca-certificates DLA-2593-1 未知 20161130+nmu1+deb9u1 20200601~deb9u2 ca-certificates - whitelist Symantec CA

漏洞详情:

镜像层: sha256:e0673f01cdb98528b4bcf27e906ce20884370a1aac92e8000097cba1d14ab51b

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00