docker.io/lemono0/fastjsonparty:1280-groovy linux/amd64

docker.io/lemono0/fastjsonparty:1280-groovy - Trivy安全扫描结果 扫描时间: 2026-07-21 15:13
全部漏洞信息
低危漏洞:161 中危漏洞:292 高危漏洞:202 严重漏洞:51

系统OS: debian 9.4 扫描引擎: Trivy 扫描时间: 2026-07-21 15:13

docker.io/lemono0/fastjsonparty:1280-groovy (debian 9.4) (debian)
低危漏洞:152 中危漏洞:253 高危漏洞:155 严重漏洞:36
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bzip2 CVE-2019-12900 严重 1.0.6-8.1 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:e6cc336fde0da8de480862857b2f900bba117dbe8e3ce273c243a6ccded14e08

发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15

dpkg CVE-2022-1664 严重 1.18.24 1.18.26 Dpkg::Source::Archive in dpkg, the Debian package management system, b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-05-26 14:15 修改: 2026-06-17 04:22

libbsd0 CVE-2019-20367 严重 0.8.3-1 0.8.3-1+deb9u1 nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a com ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20367

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-08 17:15 修改: 2026-06-17 02:30

libbz2-1.0 CVE-2019-12900 严重 1.0.6-8.1 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15

libc-bin CVE-2017-18269 严重 2.24-11+deb9u3 2.24-11+deb9u4 glibc: memory corruption in memcpy-sse2-unaligned.S

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18269

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:12

libc6 CVE-2017-18269 严重 2.24-11+deb9u3 2.24-11+deb9u4 glibc: memory corruption in memcpy-sse2-unaligned.S

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18269

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:12

libdb5.3 CVE-2019-8457 严重 5.3.28-12+deb9u1 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42

libexpat1 CVE-2022-22822 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22823 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22824 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-23852 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-24 02:15 修改: 2026-06-17 04:30

libexpat1 CVE-2022-25235 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25236 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-02-16 01:15 修改: 2026-06-17 04:33

libexpat1 CVE-2022-25315 严重 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libfreetype6 CVE-2020-15999 严重 2.6.3-3.2 2.6.3-3.2+deb9u2 freetype: Heap-based buffer overflow due to integer truncation in Load_SBit_Png

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15999

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-11-03 03:15 修改: 2026-06-17 02:57

libfreetype6 CVE-2022-27404 严重 2.6.3-3.2 FreeType: Buffer overflow in sfnt_init_face

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27404

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-22 14:15 修改: 2026-06-17 04:36

libidn11 CVE-2017-14062 严重 1.33-1 1.33-1+deb9u1 libidn2: Integer overflow in puny_decode.c/decode_digit

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14062

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-08-31 16:29 修改: 2026-06-17 01:05

liblz4-1 CVE-2021-3520 严重 0.0~r131-2+b1 0.0~r131-2+deb9u1 lz4: memory corruption due to an integer overflow bug caused by memmove argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3520

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-06-02 13:15 修改: 2026-06-17 04:05

libnss3 CVE-2019-17006 严重 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-22 21:15 修改: 2026-06-17 02:23

libnss3 CVE-2020-12403 严重 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-05-27 19:15 修改: 2026-06-17 02:51

libnss3 CVE-2021-43527 严重 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u3 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-12-08 22:15 修改: 2026-06-17 04:11

libpng16-16 CVE-2017-12652 严重 1.6.28-1 libpng: does not check length of chunks against user limit

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12652

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-10 15:15 修改: 2026-06-17 01:03

libsqlite3-0 CVE-2019-8457 严重 3.16.2-5+deb9u1 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42

libx11-6 CVE-2021-31535 严重 2:1.6.4-3 2:1.6.4-3+deb9u4 libX11: missing request length checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31535

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-05-27 13:15 修改: 2026-06-17 03:51

libx11-data CVE-2021-31535 严重 2:1.6.4-3 2:1.6.4-3+deb9u4 libX11: missing request length checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31535

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-05-27 13:15 修改: 2026-06-17 03:51

login CVE-2017-12424 严重 1:4.4-4.1 1:4.4-4.1+deb9u1 shadow-utils: Buffer overflow via newusers tool

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12424

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-08-04 09:29 修改: 2026-06-17 01:03

multiarch-support CVE-2017-18269 严重 2.24-11+deb9u3 2.24-11+deb9u4 glibc: memory corruption in memcpy-sse2-unaligned.S

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18269

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:12

openjdk-8-jdk-headless CVE-2018-3183 严重 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3183

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jre-headless CVE-2018-3183 严重 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Unrestricted access to scripting engine (Scripting, 8202936)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3183

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

passwd CVE-2017-12424 严重 1:4.4-4.1 1:4.4-4.1+deb9u1 shadow-utils: Buffer overflow via newusers tool

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12424

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-08-04 09:29 修改: 2026-06-17 01:03

perl-base CVE-2018-18311 严重 5.24.1-3+deb9u2 5.24.1-3+deb9u5 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18311

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-12-07 21:29 修改: 2026-06-17 01:46

perl-base CVE-2018-18312 严重 5.24.1-3+deb9u2 5.24.1-3+deb9u5 perl: Heap-based buffer overflow in S_handle_regex_sets()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18312

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-12-05 22:29 修改: 2026-06-17 01:46

perl-base CVE-2018-18313 严重 5.24.1-3+deb9u2 5.24.1-3+deb9u5 perl: Heap-based buffer read overflow in S_grok_bslash_N()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18313

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-12-07 21:29 修改: 2026-06-17 01:46

perl-base CVE-2018-18314 严重 5.24.1-3+deb9u2 5.24.1-3+deb9u5 perl: Heap-based buffer overflow in S_regatom()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18314

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-12-07 21:29 修改: 2026-06-17 01:46

perl-base CVE-2018-6797 严重 5.24.1-3+deb9u2 5.24.1-3+deb9u3 perl: heap write overflow in regcomp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6797

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-04-17 20:29 修改: 2026-06-17 02:02

perl-base CVE-2018-6913 严重 5.24.1-3+deb9u2 5.24.1-3+deb9u3 perl: heap buffer overflow in pp_pack.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6913

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-04-17 20:29 修改: 2026-06-17 02:02

libdbus-1-3 CVE-2019-12749 高危 1.10.26-0+deb9u1 1.10.28-0+deb9u1 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-06-11 17:29 修改: 2026-06-17 02:15

libdbus-1-3 CVE-2020-35512 高危 1.10.26-0+deb9u1 1.10.32-0+deb9u1 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:13

e2fsprogs CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

gcc-6-base CVE-2018-12886 高危 6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

gpgv CVE-2018-1000858 高危 2.1.18-8~deb9u1 gnupg2: Cross site request forgery in dirmngr resulting in an information disclosure or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000858

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-12-20 17:29 修改: 2026-06-17 01:33

gpgv CVE-2018-12020 高危 2.1.18-8~deb9u1 2.1.18-8~deb9u2 gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12020

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-06-08 21:29 修改: 2026-06-17 01:37

gzip CVE-2022-1271 高危 1.6-5+b1 1.6-5+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

krb5-locales CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libapt-pkg5.0 CVE-2019-3462 高危 1.4.8 1.4.9 Incorrect sanitation of the 302 redirect field in HTTP transport metho ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3462

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-28 21:29 修改: 2026-06-17 02:35

libexpat1 CVE-2018-20843 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u2 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20843

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-06-24 17:15 修改: 2026-06-17 01:53

libexpat1 CVE-2019-15903 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u3 expat: heap-based buffer over-read via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15903

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-09-04 06:15 修改: 2026-06-17 02:21

libexpat1 CVE-2021-45960 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-01 19:15 修改: 2026-06-17 04:14

libexpat1 CVE-2021-46143 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-06 04:15 修改: 2026-06-17 04:14

libexpat1 CVE-2022-22825 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22826 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-22827 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-10 14:12 修改: 2026-06-17 04:29

libexpat1 CVE-2022-23990 高危 2.2.0-2+deb9u1 2.2.0-2+deb9u4 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-26 19:15 修改: 2026-06-17 04:31

libfdisk1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

libavahi-client3 CVE-2021-26720 高危 0.6.32-2 0.6.32-2+deb9u1 avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-26720

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-17 22:15 修改: 2026-06-17 03:43

libavahi-common-data CVE-2021-26720 高危 0.6.32-2 0.6.32-2+deb9u1 avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-26720

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-17 22:15 修改: 2026-06-17 03:43

libfreetype6 CVE-2022-27405 高危 2.6.3-3.2 FreeType: Segmentation violation via FNT_Size_Request

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27405

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libfreetype6 CVE-2022-27406 高危 2.6.3-3.2 Freetype: Segmentation violation via FT_Request_Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27406

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-22 14:15 修改: 2026-07-09 01:17

libgcc1 CVE-2018-12886 高危 1:6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

libgcrypt20 CVE-2021-33560 高危 1.7.6-2+deb9u2 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54

libgmp10 CVE-2021-43618 高危 2:6.1.2+dfsg-1 2:6.1.2+dfsg-1+deb9u1 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-11-15 04:15 修改: 2026-06-17 04:11

libgnutls30 CVE-2019-3829 高危 3.5.8-5+deb9u3 3.5.8-5+deb9u5 gnutls: use-after-free/double-free in certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3829

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-03-27 18:29 修改: 2026-06-17 02:35

libgssapi-krb5-2 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libhogweed4 CVE-2021-20305 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libhogweed4 CVE-2021-3580 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

libavahi-common3 CVE-2021-26720 高危 0.6.32-2 0.6.32-2+deb9u1 avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-26720

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-17 22:15 修改: 2026-06-17 03:43

libjpeg62-turbo CVE-2019-2201 高危 1:1.5.1-2 1:1.5.1-2+deb9u2 libjpeg-turbo: several integer overflows and subsequent segfaults when attempting to compress/decompress gigapixel images

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2201

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-11-13 18:15 修改: 2026-06-17 02:33

libjpeg62-turbo CVE-2020-13790 高危 1:1.5.1-2 1:1.5.1-2+deb9u1 libjpeg-turbo: heap-based buffer over-read in get_rgb_row() in rdppm.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13790

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-06-03 19:15 修改: 2026-06-17 02:53

libjpeg62-turbo CVE-2020-14152 高危 1:1.5.1-2 1:1.5.1-2+deb9u1 libjpeg: improper handling of max_memory_to_use setting can lead to excessive memory consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14152

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54

libk5crypto3 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libkrb5-3 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libkrb5support0 CVE-2020-28196 高危 1.15-1+deb9u1 1.15-1+deb9u2 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-11-06 08:15 修改: 2026-06-17 03:10

libblkid1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

liblzma5 CVE-2022-1271 高危 5.2.2-1.2+b1 5.2.2-1.2+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

libmount1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

libncursesw5 CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40

libnettle6 CVE-2021-20305 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-04-05 22:15 修改: 2026-06-17 03:33

libnettle6 CVE-2021-3580 高危 3.3-1+b2 3.3-1+deb9u1 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-05 21:15 修改: 2026-06-17 04:05

apt CVE-2019-3462 高危 1.4.8 1.4.9 Incorrect sanitation of the 302 redirect field in HTTP transport metho ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3462

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-28 21:29 修改: 2026-06-17 02:35

dbus CVE-2019-12749 高危 1.10.26-0+deb9u1 1.10.28-0+deb9u1 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-06-11 17:29 修改: 2026-06-17 02:15

dbus CVE-2020-35512 高危 1.10.26-0+deb9u1 1.10.32-0+deb9u1 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-15 17:15 修改: 2026-06-17 03:13

libnss3 CVE-2019-11719 高危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 14:15 修改: 2026-06-17 02:13

libnss3 CVE-2019-11729 高危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 14:15 修改: 2026-06-17 02:13

libnss3 CVE-2019-11745 高危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-08 20:15 修改: 2026-06-17 02:13

libnss3 CVE-2019-17007 高危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-22 21:15 修改: 2026-06-17 02:23

libnss3 CVE-2020-25648 高危 2:3.26.2-1.1+deb9u1 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-20 22:15 修改: 2026-06-17 03:07

libp11-kit0 CVE-2020-29361 高危 0.23.3-2 0.23.3-2+deb9u1 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11

libc-bin CVE-2017-1000408 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Memory leak reachable via LD_HWCAP_MASK

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000408

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-01 04:29 修改: 2026-06-17 00:59

libsmartcols1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

libc-bin CVE-2017-1000409 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000409

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-01 04:29 修改: 2026-06-17 00:59

libsqlite3-0 CVE-2018-20346 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20346

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-21 21:29 修改: 2026-06-17 01:52

libsqlite3-0 CVE-2018-20506 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: Multiple flaws in sqlite which can be triggered via corrupted internal databases (Magellan)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20506

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-03 18:29 修改: 2026-06-17 01:52

libsqlite3-0 CVE-2018-8740 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8740

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-17 00:29 修改: 2026-06-17 02:05

libsqlite3-0 CVE-2019-20218 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u3 sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20218

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-02 14:16 修改: 2026-06-17 02:30

libsqlite3-0 CVE-2019-5827 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5827

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-06-27 17:15 修改: 2026-06-17 02:38

libsqlite3-0 CVE-2019-9936 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: heap-based buffer over-read in function fts5HashEntrySort in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9936

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44

libsqlite3-0 CVE-2019-9937 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: null-pointer dereference in function fts5ChunkIterate in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9937

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-03-22 08:29 修改: 2026-06-17 02:44

libsqlite3-0 CVE-2020-11655 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: malformed window-function query leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11655

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-09 03:15 修改: 2026-06-17 02:50

libsqlite3-0 CVE-2020-13630 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: Use-after-free in fts3EvalNextRow in ext/fts3/fts3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13630

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53

libsqlite3-0 CVE-2020-13871 高危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: use-after-free in resetAccumulator in select.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13871

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-06-06 16:15 修改: 2026-06-17 02:53

libss2 CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

libssl1.1 CVE-2018-0732 高危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0732

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-06-12 13:29 修改: 2026-06-17 01:31

libssl1.1 CVE-2019-1543 高危 1.1.0f-3+deb9u1 1.1.0k-1~deb9u1 openssl: ChaCha20-Poly1305 with long nonces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1543

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-03-06 21:29 修改: 2026-06-17 02:28

libssl1.1 CVE-2021-23840 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u3 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2021-3712 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u4 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

libssl1.1 CVE-2022-0778 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

libssl1.1 CVE-2022-1292 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libstdc++6 CVE-2018-12886 高危 6.3.0-18+deb9u1 gcc: spilling of stack protection address in cfgexpand.c and function.c leads to stack-overflow protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12886

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-05-22 19:29 修改: 2026-06-17 01:38

libsystemd0 CVE-2018-15686 高危 232-25+deb9u2 232-25+deb9u10 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42

libsystemd0 CVE-2018-15688 高危 232-25+deb9u2 232-25+deb9u6 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42

libsystemd0 CVE-2018-16864 高危 232-25+deb9u2 232-25+deb9u7 systemd: stack overflow when calling syslog from a command with long cmdline

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-11 20:29 修改: 2026-06-17 01:44

libsystemd0 CVE-2018-16865 高危 232-25+deb9u2 232-25+deb9u7 systemd: stack overflow when receiving many journald entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-11 21:29 修改: 2026-06-17 01:44

libsystemd0 CVE-2019-3842 高危 232-25+deb9u2 232-25+deb9u11 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35

libsystemd0 CVE-2019-3843 高危 232-25+deb9u2 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libsystemd0 CVE-2019-3844 高危 232-25+deb9u2 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libsystemd0 CVE-2020-1712 高危 232-25+deb9u2 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02

libtinfo5 CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40

libudev1 CVE-2018-15686 高危 232-25+deb9u2 232-25+deb9u10 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42

libudev1 CVE-2018-15688 高危 232-25+deb9u2 232-25+deb9u6 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-10-26 14:29 修改: 2026-06-17 01:42

libudev1 CVE-2018-16864 高危 232-25+deb9u2 232-25+deb9u7 systemd: stack overflow when calling syslog from a command with long cmdline

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-11 20:29 修改: 2026-06-17 01:44

libudev1 CVE-2018-16865 高危 232-25+deb9u2 232-25+deb9u7 systemd: stack overflow when receiving many journald entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-11 21:29 修改: 2026-06-17 01:44

libudev1 CVE-2019-3842 高危 232-25+deb9u2 232-25+deb9u11 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-04-09 21:29 修改: 2026-06-17 02:35

libudev1 CVE-2019-3843 高危 232-25+deb9u2 systemd: services with DynamicUser can create SUID/SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3843

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libudev1 CVE-2019-3844 高危 232-25+deb9u2 systemd: services with DynamicUser can get new privileges and create SGID binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3844

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-04-26 21:29 修改: 2026-06-17 02:35

libudev1 CVE-2020-1712 高危 232-25+deb9u2 232-25+deb9u14 systemd: use-after-free when asynchronous polkit queries are performed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1712

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-03-31 17:15 修改: 2026-06-17 03:02

libuuid1 CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

libc-bin CVE-2017-16997 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16997

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-12-18 01:29 修改: 2026-06-17 01:10

libx11-6 CVE-2020-14363 高危 2:1.6.4-3 2:1.6.4-3+deb9u3 libX11: integer overflow leads to double free in locale handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14363

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-09-11 18:15 修改: 2026-06-17 02:54

bsdutils CVE-2016-2779 高危 1:2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

libx11-data CVE-2020-14363 高危 2:1.6.4-3 2:1.6.4-3+deb9u3 libX11: integer overflow leads to double free in locale handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14363

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-09-11 18:15 修改: 2026-06-17 02:54

libc6 CVE-2017-1000408 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Memory leak reachable via LD_HWCAP_MASK

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000408

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-01 04:29 修改: 2026-06-17 00:59

login CVE-2017-20002 高危 1:4.4-4.1 1:4.4-4.1+deb9u1 The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-20002

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-03-17 06:15 修改: 2026-06-17 01:14

mount CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

libc6 CVE-2017-1000409 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000409

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-01 04:29 修改: 2026-06-17 00:59

multiarch-support CVE-2017-1000408 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Memory leak reachable via LD_HWCAP_MASK

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000408

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-01 04:29 修改: 2026-06-17 00:59

multiarch-support CVE-2017-1000409 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow triggerable via LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000409

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-01 04:29 修改: 2026-06-17 00:59

multiarch-support CVE-2017-16997 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16997

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-12-18 01:29 修改: 2026-06-17 01:10

ncurses-base CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40

ncurses-bin CVE-2022-29458 高危 6.0+20161126-1+deb9u2 ncurses: segfaulting OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40

libc6 CVE-2017-16997 高危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16997

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-12-18 01:29 修改: 2026-06-17 01:10

openjdk-8-jdk-headless CVE-2018-2633 高危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2633

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2637 高危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2637

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2794 高危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2794

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2814 高危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2814

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-3149 高危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3149

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jdk-headless CVE-2018-3169 高危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Improper field access checks (Hotspot, 8199226)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3169

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jdk-headless CVE-2019-2602 高危 8u151-b12-1~deb9u1 8u212-b03-2~deb9u1 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2602

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2698 高危 8u151-b12-1~deb9u1 8u212-b03-2~deb9u1 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2698

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2020-14583 高危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14593 高危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-2604 高危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2803 高危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2805 高危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

libcomerr2 CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

openjdk-8-jre-headless CVE-2018-2633 高危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2633

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2637 高危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2637

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2794 高危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unrestricted deserialization of data from JCEKS key stores (Security, 8189997)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2794

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2814 高危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: incorrect handling of Reference clones can lead to sandbox bypass (Hotspot, 8192025)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2814

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-3149 高危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Incomplete enforcement of the trustURLCodebase restriction (JNDI, 8199177)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3149

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jre-headless CVE-2018-3169 高危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Improper field access checks (Hotspot, 8199226)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3169

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jre-headless CVE-2019-2602 高危 8u151-b12-1~deb9u1 8u212-b03-2~deb9u1 OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2602

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2698 高危 8u151-b12-1~deb9u1 8u212-b03-2~deb9u1 OpenJDK: Font layout engine out of bounds access setCurrGlyphID() (2D, 8219022)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2698

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2020-14583 高危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Bypass of boundary checks in nio.Buffer via concurrent access (Libraries, 8238920)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14583

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14593 高危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Incomplete bounds checks in Affine Transformations (2D, 8240119)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14593

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-2604 高危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Serialization filter changes via jdk.serialFilter property modification (Serialization, 8231422)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2604

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2803 高危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2803

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2805 高危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect type checks in MethodType.readObject() (Libraries, 8235274)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2805

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openssl CVE-2018-0732 高危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0732

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-06-12 13:29 修改: 2026-06-17 01:31

openssl CVE-2019-1543 高危 1.1.0f-3+deb9u1 1.1.0k-1~deb9u1 openssl: ChaCha20-Poly1305 with long nonces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1543

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-03-06 21:29 修改: 2026-06-17 02:28

openssl CVE-2021-23840 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u3 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2021-3712 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u4 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-24 15:15 修改: 2026-06-17 04:05

openssl CVE-2022-0778 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u5 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-03-15 17:15 修改: 2026-06-17 04:21

openssl CVE-2022-1292 高危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u6 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22

libcups2 CVE-2017-15400 高危 2.2.1-8+deb9u1 2.2.1-8+deb9u2 cups: Insufficient restriction of IPP filters allows a remote attacker to execute commands with the privilege level of cups daemon

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15400

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-02-07 23:29 修改: 2026-06-17 01:07

passwd CVE-2017-20002 高危 1:4.4-4.1 1:4.4-4.1+deb9u1 The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-20002

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-03-17 06:15 修改: 2026-06-17 01:14

libcups2 CVE-2018-4180 高危 2.2.1-8+deb9u1 2.2.1-8+deb9u2 cups: Local privilege escalation to root due to insecure environment variable handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4180

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-01-11 18:29 修改: 2026-06-17 01:58

libcups2 CVE-2018-6553 高危 2.2.1-8+deb9u1 2.2.1-8+deb9u2 cups: AppArmor cupsd Sandbox Bypass Due to Use of Hard Links

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6553

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-10 15:29 修改: 2026-06-17 02:02

libcups2 CVE-2019-8675 高危 2.2.1-8+deb9u1 2.2.1-8+deb9u4 cups: stack-buffer-overflow in libcups's asn1_get_type function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8675

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-27 20:15 修改: 2026-06-17 02:42

libcups2 CVE-2019-8696 高危 2.2.1-8+deb9u1 2.2.1-8+deb9u4 cups: stack-buffer-overflow in libcups's asn1_get_packed function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8696

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-27 20:15 修改: 2026-06-17 02:42

libcups2 CVE-2020-3898 高危 2.2.1-8+deb9u1 2.2.1-8+deb9u6 cups: heap based buffer overflow in libcups's ppdFindOption() in ppd-mark.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3898

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-22 18:15 修改: 2026-06-17 03:19

e2fslibs CVE-2022-1304 高危 1.43.4-2 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22

perl-base CVE-2018-12015 高危 5.24.1-3+deb9u2 5.24.1-3+deb9u4 perl: Directory traversal in Archive::Tar

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12015

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-06-07 13:29 修改: 2026-06-17 01:36

perl-base CVE-2018-6798 高危 5.24.1-3+deb9u2 5.24.1-3+deb9u3 perl: heap read overflow in regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6798

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-04-17 20:29 修改: 2026-06-17 02:02

perl-base CVE-2020-10543 高危 5.24.1-3+deb9u2 5.24.1-3+deb9u7 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-06-05 14:15 修改: 2026-06-17 02:47

perl-base CVE-2020-10878 高危 5.24.1-3+deb9u2 5.24.1-3+deb9u7 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-06-05 14:15 修改: 2026-06-17 02:48

perl-base CVE-2020-12723 高危 5.24.1-3+deb9u2 5.24.1-3+deb9u7 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-06-05 15:15 修改: 2026-06-17 02:52

perl-base CVE-2020-16156 高危 5.24.1-3+deb9u2 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57

unzip CVE-2018-1000035 高危 6.0-21 6.0-21+deb9u1 unzip: Heap-based buffer overflow in fileio.c:UzpPassword function allows code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000035

镜像层: sha256:e6cc336fde0da8de480862857b2f900bba117dbe8e3ce273c243a6ccded14e08

发布日期: 2018-02-09 23:29 修改: 2026-06-17 01:32

util-linux CVE-2016-2779 高危 2.29.2-1+deb9u1 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

xz-utils CVE-2022-1271 高危 5.2.2-1.2+b1 5.2.2-1.2+deb9u1 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:e6cc336fde0da8de480862857b2f900bba117dbe8e3ce273c243a6ccded14e08

发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22

zlib1g CVE-2018-25032 高危 1:1.2.8.dfsg-5 1:1.2.8.dfsg-5+deb9u1 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16

libssl1.1 CVE-2021-23841 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u3 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

libssl1.1 CVE-2021-4160 中危 1.1.0f-3+deb9u1 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19

libapt-pkg5.0 CVE-2020-27350 中危 1.4.8 1.4.11 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-12-10 04:15 修改: 2026-06-17 03:09

libapt-pkg5.0 CVE-2020-3810 中危 1.4.8 1.4.10 Missing input validation in the ar/tar implementations of APT before v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-05-15 14:15 修改: 2026-06-17 03:19

libjpeg62-turbo CVE-2018-1152 中危 1:1.5.1-2 1:1.5.1-2+deb9u1 libjpeg-turbo: Divide by zero allows for denial of service via crafted BMP image

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1152

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-06-18 14:29 修改: 2026-06-17 01:50

libjpeg62-turbo CVE-2018-14498 中危 1:1.5.1-2 1:1.5.1-2+deb9u1 libjpeg-turbo: heap-based buffer over-read via crafted 8-bit BMP in get_8bit_row in rdbmp.c leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14498

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-03-07 23:29 修改: 2026-06-17 01:41

e2fsprogs CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37

libk5crypto3 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libk5crypto3 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libk5crypto3 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libk5crypto3 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libsystemd0 CVE-2018-1049 中危 232-25+deb9u2 232-25+deb9u10 systemd: automount: access to automounted volumes can lock up

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-16 21:29 修改: 2026-06-17 01:50

libsystemd0 CVE-2019-6454 中危 232-25+deb9u2 232-25+deb9u9 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:39

libsystemd0 CVE-2021-33910 中危 232-25+deb9u2 232-25+deb9u13 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

libsystemd0 CVE-2021-3997 中危 232-25+deb9u2 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

libavahi-client3 CVE-2021-3468 中危 0.6.32-2 0.6.32-2+deb9u1 avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3468

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-06-02 16:15 修改: 2026-06-17 04:05

libkrb5-3 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libkrb5-3 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libkrb5-3 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libkrb5-3 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libcomerr2 CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37

libkrb5support0 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libkrb5support0 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libkrb5support0 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libudev1 CVE-2018-1049 中危 232-25+deb9u2 232-25+deb9u10 systemd: automount: access to automounted volumes can lock up

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-16 21:29 修改: 2026-06-17 01:50

libudev1 CVE-2019-6454 中危 232-25+deb9u2 232-25+deb9u9 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-03-21 16:01 修改: 2026-06-17 02:39

libudev1 CVE-2021-33910 中危 232-25+deb9u2 232-25+deb9u13 systemd: uncontrolled allocation on the stack in function unit_name_path_escape leads to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33910

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-20 19:15 修改: 2026-06-17 03:55

libudev1 CVE-2021-3997 中危 232-25+deb9u2 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2022-08-23 20:15 修改: 2026-06-17 04:06

libkrb5support0 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

liblcms2-2 CVE-2018-16435 中危 2.8-4 2.8-4+deb9u1 lcms2: Integer overflow in AllocateDataSet() in cmscgats.c leading to heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16435

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-09-04 00:29 修改: 2026-06-17 01:44

libcomerr2 CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37

libx11-6 CVE-2020-14344 中危 2:1.6.4-3 2:1.6.4-3+deb9u2 libX11: Heap overflow in the X input method client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14344

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-08-05 14:15 修改: 2026-06-17 02:54

apt CVE-2020-27350 中危 1.4.8 1.4.11 APT had several integer overflows and underflows while parsing .deb pa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27350

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-12-10 04:15 修改: 2026-06-17 03:09

libavahi-common-data CVE-2021-3468 中危 0.6.32-2 0.6.32-2+deb9u1 avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3468

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-06-02 16:15 修改: 2026-06-17 04:05

libx11-data CVE-2020-14344 中危 2:1.6.4-3 2:1.6.4-3+deb9u2 libX11: Heap overflow in the X input method client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14344

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-08-05 14:15 修改: 2026-06-17 02:54

apt CVE-2020-3810 中危 1.4.8 1.4.10 Missing input validation in the ar/tar implementations of APT before v ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-3810

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-05-15 14:15 修改: 2026-06-17 03:19

libavahi-common3 CVE-2021-3468 中危 0.6.32-2 0.6.32-2+deb9u1 avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3468

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-06-02 16:15 修改: 2026-06-17 04:05

e2fslibs CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37

libnettle6 CVE-2018-16869 中危 3.3-1+b2 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44

e2fslibs CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37

libexpat1 CVE-2022-25313 中危 2.2.0-2+deb9u1 2.2.0-2+deb9u5 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-02-18 05:15 修改: 2026-06-17 04:33

libcups2 CVE-2017-18248 中危 2.2.1-8+deb9u1 2.2.1-8+deb9u3 cups: Invalid usernames handled in scheduler/ipp.c:add_job() allow remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18248

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-26 17:29 修改: 2026-06-17 01:12

libcups2 CVE-2018-4181 中危 2.2.1-8+deb9u1 2.2.1-8+deb9u2 cups: Manipulation of cupsd.conf by a local attacker resulting in limited reads of arbitrary files as root

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4181

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-01-11 18:29 修改: 2026-06-17 01:58

libcups2 CVE-2018-4300 中危 2.2.1-8+deb9u1 2.2.1-8+deb9u3 cups: Session cookie generated by the CUPS web interface is easy to guess

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4300

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-03 18:29 修改: 2026-06-17 01:58

libcups2 CVE-2019-2180 中危 2.2.1-8+deb9u1 2.2.1-8+deb9u4 In ippSetValueTag of ipp.c in Android 8.0, 8.1 and 9, there is a possi ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2180

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-09-05 22:15 修改: 2026-06-17 02:33

libcups2 CVE-2019-2228 中危 2.2.1-8+deb9u1 2.2.1-8+deb9u5 In array_find of array.c, there is a possible out-of-bounds read due t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2228

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-12-06 23:15 修改: 2026-06-17 02:33

libcups2 CVE-2020-10001 中危 2.2.1-8+deb9u1 2.2.1-8+deb9u7 cups: access to uninitialized buffer in ipp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10001

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-04-02 18:15 修改: 2026-06-17 02:47

libnss3 CVE-2018-12404 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-05-02 17:29 修改: 2026-06-17 01:37

libnss3 CVE-2018-18508 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: NULL pointer dereference in several CMS functions resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-22 21:15 修改: 2026-06-17 01:47

libnss3 CVE-2019-11727 中危 2:3.26.2-1.1+deb9u1 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 14:15 修改: 2026-06-17 02:13

libnss3 CVE-2020-12399 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Timing attack on DSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12399

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-09 15:15 修改: 2026-06-17 02:51

libnss3 CVE-2020-12400 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-08 14:15 修改: 2026-06-17 02:51

libnss3 CVE-2020-12401 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-08 14:15 修改: 2026-06-17 02:51

libnss3 CVE-2020-12402 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-09 15:15 修改: 2026-06-17 02:51

libnss3 CVE-2020-12413 中危 2:3.26.2-1.1+deb9u1 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2023-02-16 22:15 修改: 2026-06-17 02:51

libnss3 CVE-2020-6829 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u2 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-28 12:15 修改: 2026-06-17 03:23

libnss3 CVE-2022-22747 中危 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u5 Mozilla: Crash when handling empty pkcs7 sequence

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22747

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-12-22 20:15 修改: 2026-06-17 04:28

libcups2 CVE-2022-26691 中危 2.2.1-8+deb9u1 2.2.1-8+deb9u8 cups: authorization bypass when using "local" authorization

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26691

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-05-26 18:15 修改: 2026-06-17 04:35

openjdk-8-jdk-headless CVE-2018-2582 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2582

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2588 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2588

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2599 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2599

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2602 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2602

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2603 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2603

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2618 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: insufficient strength of key agreement (JCE, 8185292)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2618

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2629 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: GSS context use-after-free (JGSS, 8186212)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2629

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2634 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2634

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2641 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: GTK library loading use-after-free (AWT, 8185325)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2641

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2663 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2663

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2677 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2677

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2678 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2678

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2795 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2795

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2796 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2796

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2797 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2797

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2798 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2798

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2799 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2799

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2800 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2800

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2815 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2815

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-3180 中危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3180

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jdk-headless CVE-2018-3214 中危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3214

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jdk-headless CVE-2019-2684 中危 8u151-b12-1~deb9u1 8u212-b03-2~deb9u1 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2684

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2745 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2762 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2769 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2816 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Missing URL format validation (Networking, 8221518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2949 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2975 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2989 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35

openjdk-8-jdk-headless CVE-2019-2999 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35

openjdk-8-jdk-headless CVE-2020-14556 中危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54

openjdk-8-jdk-headless CVE-2020-14621 中危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14779 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14781 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14782 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14792 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14797 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14803 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-2593 中危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2601 中危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2781 中危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2800 中危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2830 中危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13

openjdk-8-jdk-headless CVE-2021-2341 中危 8u151-b12-1~deb9u1 8u302-b08-1~deb9u1 OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2341

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-07-21 15:15 修改: 2026-06-17 03:49

openjdk-8-jdk-headless CVE-2021-2369 中危 8u151-b12-1~deb9u1 8u302-b08-1~deb9u1 OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2369

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-07-21 15:15 修改: 2026-06-17 03:49

openjdk-8-jdk-headless CVE-2021-2388 中危 8u151-b12-1~deb9u1 8u302-b08-1~deb9u1 OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2388

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-07-21 15:15 修改: 2026-06-17 03:49

openjdk-8-jdk-headless CVE-2021-35550 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35550

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35556 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35556

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35559 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35559

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35561 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35561

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35564 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35564

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35565 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35565

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35567 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35567

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35578 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35578

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35586 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35586

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2022-21248 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21248

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21282 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21282

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21283 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21283

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21293 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21293

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21294 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21294

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21296 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21296

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21299 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21299

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21305 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21305

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jdk-headless CVE-2022-21340 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21340

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21341 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21341

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21349 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Unaligned memory access in ContextualGlyphSubstProc2 (2D, 8273748)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21349

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21360 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21360

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21365 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21365

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21426 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21426

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21434 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21434

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21443 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21443

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21476 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21476

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jdk-headless CVE-2022-21496 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21496

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

libp11-kit0 CVE-2020-29362 中危 0.23.3-2 0.23.3-2+deb9u1 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-12-16 14:15 修改: 2026-06-17 03:11

libpcre3 CVE-2020-14155 中危 2:8.39-3 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:54

libgcrypt20 CVE-2018-0495 中危 1.7.6-2+deb9u2 1.7.6-2+deb9u3 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-06-13 23:29 修改: 2026-06-17 01:30

libpng16-16 CVE-2019-7317 中危 1.6.28-1 1.6.28-1+deb9u1 libpng: use-after-free in png_image_free in png.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7317

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-02-04 08:29 修改: 2026-06-17 02:40

libgcrypt20 CVE-2019-13627 中危 1.7.6-2+deb9u2 libgcrypt: ECDSA timing attack allowing private key leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13627

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-09-25 15:15 修改: 2026-06-17 02:17

libgcrypt20 CVE-2021-40528 中危 1.7.6-2+deb9u2 1.7.6-2+deb9u4 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-09-06 19:15 修改: 2026-06-17 04:07

dbus CVE-2020-12049 中危 1.10.26-0+deb9u1 1.10.32-0+deb9u1 dbus: denial of service via file descriptor leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-06-08 17:15 修改: 2026-06-17 02:51

krb5-locales CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libgnutls30 CVE-2018-10844 中危 3.5.8-5+deb9u3 3.5.8-5+deb9u4 gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10844

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34

libgnutls30 CVE-2018-10845 中危 3.5.8-5+deb9u3 3.5.8-5+deb9u4 gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10845

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34

libgnutls30 CVE-2018-10846 中危 3.5.8-5+deb9u3 3.5.8-5+deb9u4 gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10846

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-22 13:29 修改: 2026-06-17 01:34

libgnutls30 CVE-2018-16868 中危 3.5.8-5+deb9u3 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16868

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44

libgnutls30 CVE-2021-4209 中危 3.5.8-5+deb9u3 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19

krb5-locales CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

openjdk-8-jre-headless CVE-2018-2582 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2582

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2588 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2588

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2599 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: DnsClient missing source port randomization (JNDI, 8182125)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2599

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2602 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: loading of classes from untrusted locations (I18n, 8182601)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2602

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2603 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2603

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2618 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: insufficient strength of key agreement (JCE, 8185292)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2618

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2629 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: GSS context use-after-free (JGSS, 8186212)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2629

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2634 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2634

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2641 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: GTK library loading use-after-free (AWT, 8185325)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2641

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2663 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2663

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2677 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2677

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2678 中危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2678

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2795 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: insufficient consistency checks in deserialization of multiple classes (Security, 8189977)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2795

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2796 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency, 8189981)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2796

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2797 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2797

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2798 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in Container (AWT, 8189989)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2798

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2799 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in NamedNodeMapImpl (JAXP, 8189993)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2799

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2800 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: RMI HTTP transport enabled by default (RMI, 8193833)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2800

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2815 中危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: unbounded memory allocation during deserialization in StubIORImpl (Serialization, 8192757)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2815

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-3180 中危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Missing endpoint identification algorithm check during TLS session resumption (JSSE, 8202613)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3180

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jre-headless CVE-2018-3214 中危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Infinite loop in RIFF format reader (Sound, 8205361)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3214

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jre-headless CVE-2019-2684 中危 8u151-b12-1~deb9u1 8u212-b03-2~deb9u1 OpenJDK: Incorrect skeleton selection in RMI registry server-side dispatch handling (RMI, 8218453)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2684

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-23 19:32 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2745 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Side-channel attack risks in Elliptic Curve (EC) cryptography (Security, 8208698)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2745

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2762 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Insufficient checks of suppressed exceptions in deserialization (Utilities, 8212328)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2762

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2769 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Unbounded memory allocation during deserialization in Collections (Utilities, 8213432)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2769

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2816 中危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Missing URL format validation (Networking, 8221518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2816

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2949 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Improper handling of Kerberos proxy credentials (Kerberos, 8220302)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2949

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2975 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown during regular expression processing in Nashorn (Scripting, 8223518)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2975

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2989 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Incorrect handling of HTTP proxy responses in HttpURLConnection (Networking, 8225298)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2989

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35

openjdk-8-jre-headless CVE-2019-2999 中危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Insufficient filtering of HTML event attributes in Javadoc (Javadoc, 8226765)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2999

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35

openjdk-8-jre-headless CVE-2020-14556 中危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Incorrect handling of access control context in ForkJoinPool (Libraries, 8237117)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14556

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:54

openjdk-8-jre-headless CVE-2020-14621 中危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: XML validation manipulation due to incomplete application of the use-grammar-pool-only feature (JAXP, 8242136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14621

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14779 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: High memory usage during deserialization of Proxy class with many interfaces (Serialization, 8236862)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14779

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14781 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Credentials sent over unencrypted LDAP connection (JNDI, 8237990)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14781

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14782 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Certificate blacklist bypass via alternate certificate encodings (Libraries, 8237995)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14782

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14792 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Integer overflow leading to out-of-bounds access (Hotspot, 8241114)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14792

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14797 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Incomplete check for invalid characters in URI to path conversion (Libraries, 8242685)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14797

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14803 中危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Race condition in NIO Buffer boundary checks (Libraries, 8244136)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14803

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-2593 中危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Incorrect isBuiltinStreamHandler check causing URL normalization issues (Networking, 8228548)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2593

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2601 中危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Use of unsafe RSA-MD5 checksum in Kerberos TGS (Security, 8229951)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2601

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2781 中危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Re-use of single TLS session for new connections (JSSE, 8234408)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2781

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2800 中危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: CRLF injection into HTTP headers in HttpServer (Lightweight HTTP Server, 8234825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2800

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2830 中危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Regular expression DoS in Scanner (Concurrency, 8236201)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2830

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:13

openjdk-8-jre-headless CVE-2021-2341 中危 8u151-b12-1~deb9u1 8u302-b08-1~deb9u1 OpenJDK: FTP PASV command response can cause FtpClient to connect to arbitrary host (Networking, 8258432)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2341

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-07-21 15:15 修改: 2026-06-17 03:49

openjdk-8-jre-headless CVE-2021-2369 中危 8u151-b12-1~deb9u1 8u302-b08-1~deb9u1 OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2369

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-07-21 15:15 修改: 2026-06-17 03:49

openjdk-8-jre-headless CVE-2021-2388 中危 8u151-b12-1~deb9u1 8u302-b08-1~deb9u1 OpenJDK: Incorrect comparison during range check elimination (Hotspot, 8264066)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2388

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-07-21 15:15 修改: 2026-06-17 03:49

openjdk-8-jre-headless CVE-2021-35550 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Weak ciphers preferred over stronger ones for TLS (JSSE, 8264210)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35550

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35556 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in RTFParser (Swing, 8265167)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35556

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35559 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35559

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35561 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in HashMap and HashSet (Utility, 8266097)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35561

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35564 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Certificates with end dates too far in the future can corrupt keystore (Keytool, 8266137)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35564

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35565 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Loop in HttpsServer triggered during TLS session close (JSSE, 8254967)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35565

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35567 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Incorrect principal selection when using Kerberos Constrained Delegation (Libraries, 8266689)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35567

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35578 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35578

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35586 中危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8267735)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35586

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2022-21248 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21248

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21282 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21282

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21283 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21283

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21293 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21293

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21294 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21294

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21296 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21296

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21299 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21299

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21305 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21305

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:25

openjdk-8-jre-headless CVE-2022-21340 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21340

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21341 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21341

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21349 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Unaligned memory access in ContextualGlyphSubstProc2 (2D, 8273748)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21349

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21360 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21360

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21365 中危 8u151-b12-1~deb9u1 8u322-b06-1~deb9u1 OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21365

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-19 12:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21426 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Unbounded memory allocation when compiling crafted XPath expressions (JAXP, 8270504)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21426

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21434 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Improper object-to-string conversion in AnnotationInvocationHandler (Libraries, 8277672)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21434

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21443 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21443

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21476 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21476

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

openjdk-8-jre-headless CVE-2022-21496 中危 8u151-b12-1~deb9u1 8u332-ga-1~deb9u1 OpenJDK: URI parsing inconsistencies (JNDI, 8278972)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-21496

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-04-19 21:15 修改: 2026-06-17 04:26

libgssapi-krb5-2 CVE-2018-20217 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-26 21:29 修改: 2026-06-17 01:52

libgssapi-krb5-2 CVE-2018-5710 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null pointer deference in strlen function in plugins/kdb/ldap/libkdb_ldap/ldap_principal2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5710

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00

libsqlite3-0 CVE-2019-16168 中危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: Division by zero in whereLoopAddBtreeIndex in sqlite3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16168

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-09-09 17:15 修改: 2026-06-17 02:21

libsqlite3-0 CVE-2019-19645 中危 3.16.2-5+deb9u1 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-12-09 16:15 修改: 2026-06-17 02:26

libsqlite3-0 CVE-2020-13434 中危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: integer overflow in sqlite3_str_vappendf function in printf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13434

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-05-24 22:15 修改: 2026-06-17 02:53

libsqlite3-0 CVE-2020-13631 中危 3.16.2-5+deb9u1 sqlite: Virtual table can be renamed into the name of one of its shadow tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53

openssl CVE-2018-0734 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: timing side channel attack in the DSA signature algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0734

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-30 12:29 修改: 2026-06-17 01:31

openssl CVE-2018-0735 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: timing side channel attack in the ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0735

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-29 13:29 修改: 2026-06-17 01:31

openssl CVE-2018-0737 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0737

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-16 18:29 修改: 2026-06-17 01:31

openssl CVE-2018-0739 中危 1.1.0f-3+deb9u1 1.1.0f-3+deb9u2 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0739

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-27 21:29 修改: 2026-06-17 01:31

openssl CVE-2018-5407 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5407

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-11-15 21:29 修改: 2026-06-17 02:00

openssl CVE-2019-1547 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u1 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28

openssl CVE-2019-1551 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28

openssl CVE-2020-1971 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u2 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02

openssl CVE-2021-23841 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u3 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-02-16 17:15 修改: 2026-06-17 03:38

openssl CVE-2021-4160 中危 1.1.0f-3+deb9u1 openssl: Carry propagation bug in the MIPS32 and MIPS64 squaring procedure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4160

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2022-01-28 22:15 修改: 2026-06-17 04:19

libsqlite3-0 CVE-2020-13632 中危 3.16.2-5+deb9u1 3.16.2-5+deb9u2 sqlite: NULL pointer dereference in ext/fts3/fts3_snippet.c via a crafted matchinfo() query

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13632

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-05-27 15:15 修改: 2026-06-17 02:53

libgssapi-krb5-2 CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libss2 CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37

libss2 CVE-2019-5188 中危 1.43.4-2 1.43.4-2+deb9u2 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-01-08 16:15 修改: 2026-06-17 02:37

libgssapi-krb5-2 CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

libdbus-1-3 CVE-2020-12049 中危 1.10.26-0+deb9u1 1.10.32-0+deb9u1 dbus: denial of service via file descriptor leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-06-08 17:15 修改: 2026-06-17 02:51

krb5-locales CVE-2018-5729 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libhogweed4 CVE-2018-16869 中危 3.3-1+b2 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-12-03 14:29 修改: 2026-06-17 01:44

krb5-locales CVE-2021-37750 中危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-08-23 05:15 修改: 2026-06-17 04:01

e2fsprogs CVE-2019-5094 中危 1.43.4-2 1.43.4-2+deb9u1 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-09-24 22:15 修改: 2026-06-17 02:37

libssl1.1 CVE-2018-0734 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: timing side channel attack in the DSA signature algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0734

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-30 12:29 修改: 2026-06-17 01:31

libssl1.1 CVE-2018-0735 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: timing side channel attack in the ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0735

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-29 13:29 修改: 2026-06-17 01:31

libssl1.1 CVE-2018-0737 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0737

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-16 18:29 修改: 2026-06-17 01:31

libssl1.1 CVE-2018-0739 中危 1.1.0f-3+deb9u1 1.1.0f-3+deb9u2 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0739

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-27 21:29 修改: 2026-06-17 01:31

tar CVE-2018-20482 中危 1.29b-1.1 1.29b-1.1+deb9u1 tar: Infinite read loop in sparse_dump_region function in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-12-26 18:29 修改: 2026-06-17 01:52

libssl1.1 CVE-2018-5407 中危 1.1.0f-3+deb9u1 1.1.0j-1~deb9u1 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5407

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-11-15 21:29 修改: 2026-06-17 02:00

libssl1.1 CVE-2019-1547 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u1 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28

libssl1.1 CVE-2019-1551 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u5 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-12-06 18:15 修改: 2026-06-17 02:28

libssl1.1 CVE-2020-1971 中危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u2 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-12-08 16:15 修改: 2026-06-17 03:02

libkrb5-3 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libgssapi-krb5-2 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01

libgssapi-krb5-2 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libc-bin CVE-2017-15671 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Memory leak in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15671

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-20 17:29 修改: 2026-06-17 01:08

libudev1 CVE-2018-16866 低危 232-25+deb9u2 232-25+deb9u7 systemd: out-of-bounds read when parsing a crafted syslog message

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16866

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-11 19:29 修改: 2026-06-17 01:44

libudev1 CVE-2018-16888 低危 232-25+deb9u2 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45

libudev1 CVE-2018-6954 低危 232-25+deb9u2 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02

libudev1 CVE-2019-3815 低危 232-25+deb9u2 232-25+deb9u8 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-28 15:29 修改: 2026-06-17 02:35

libc-bin CVE-2017-15804 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow during unescaping of user names with the ~ operator

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15804

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-22 20:29 修改: 2026-06-17 01:08

libuuid1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libc-bin CVE-2018-11236 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libkrb5support0 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01

libnss3 CVE-2018-12384 低危 2:3.26.2-1.1+deb9u1 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12384

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-04-29 15:29 修改: 2026-06-17 01:37

libx11-6 CVE-2018-14598 低危 2:1.6.4-3 2:1.6.4-3+deb9u1 libX11: Crash on invalid reply in XListExtensions in ListExt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14598

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41

libx11-6 CVE-2018-14599 低危 2:1.6.4-3 2:1.6.4-3+deb9u1 libX11: Off-by-one error in XListExtensions in ListExt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14599

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41

libx11-6 CVE-2018-14600 低危 2:1.6.4-3 2:1.6.4-3+deb9u1 libX11: Out of Bounds write in XListExtensions in ListExt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14600

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41

libkrb5support0 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libc-bin CVE-2018-11237 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libblkid1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libx11-data CVE-2018-14598 低危 2:1.6.4-3 2:1.6.4-3+deb9u1 libX11: Crash on invalid reply in XListExtensions in ListExt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14598

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41

libx11-data CVE-2018-14599 低危 2:1.6.4-3 2:1.6.4-3+deb9u1 libX11: Off-by-one error in XListExtensions in ListExt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14599

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41

libx11-data CVE-2018-14600 低危 2:1.6.4-3 2:1.6.4-3+deb9u1 libX11: Out of Bounds write in XListExtensions in ListExt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14600

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-08-24 19:29 修改: 2026-06-17 01:41

liblz4-1 CVE-2019-17543 低危 0.0~r131-2+b1 lz4: heap-based buffer overflow in LZ4_write32

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 02:15 修改: 2026-06-17 02:24

krb5-locales CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01

login CVE-2018-7169 低危 1:4.4-4.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

libsepol1 CVE-2021-36084 低危 2.6-2 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

mount CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libsepol1 CVE-2021-36085 低危 2.6-2 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libsepol1 CVE-2021-36086 低危 2.6-2 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

libssl1.1 CVE-2017-3738 低危 1.1.0f-3+deb9u1 1.1.0f-3+deb9u2 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3738

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-12-07 16:29 修改: 2026-06-17 01:18

libssl1.1 CVE-2018-0733 低危 1.1.0f-3+deb9u1 1.1.0f-3+deb9u2 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0733

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-27 21:29 修改: 2026-06-17 01:31

multiarch-support CVE-2017-15670 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15670

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-20 17:29 修改: 2026-06-17 01:08

multiarch-support CVE-2017-15671 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Memory leak in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15671

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-20 17:29 修改: 2026-06-17 01:08

multiarch-support CVE-2017-15804 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow during unescaping of user names with the ~ operator

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15804

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-22 20:29 修改: 2026-06-17 01:08

multiarch-support CVE-2018-11236 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

multiarch-support CVE-2018-11237 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libssl1.1 CVE-2019-1563 低危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u1 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28

ncurses-base CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-11-12 19:29 修改: 2026-06-17 01:48

ncurses-base CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

ncurses-base CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

libsepol1 CVE-2021-36087 低危 2.6-2 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58

ncurses-bin CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-11-12 19:29 修改: 2026-06-17 01:48

ncurses-bin CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

ncurses-bin CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

krb5-locales CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

libsmartcols1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libmount1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

gpgv CVE-2018-9234 低危 2.1.18-8~deb9u1 GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9234

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-04-04 00:29 修改: 2026-06-17 02:06

libncursesw5 CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-11-12 19:29 修改: 2026-06-17 01:48

libncursesw5 CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

libncursesw5 CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

libc6 CVE-2017-15670 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15670

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-20 17:29 修改: 2026-06-17 01:08

libc6 CVE-2017-15671 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Memory leak in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15671

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-20 17:29 修改: 2026-06-17 01:08

libc6 CVE-2017-15804 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow during unescaping of user names with the ~ operator

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15804

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-22 20:29 修改: 2026-06-17 01:08

libc6 CVE-2018-11236 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libcups2 CVE-2019-8842 低危 2.2.1-8+deb9u1 2.2.1-8+deb9u6 A buffer overflow was addressed with improved bounds checking. This is ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8842

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-27 20:15 修改: 2026-06-17 02:42

libsystemd0 CVE-2018-16866 低危 232-25+deb9u2 232-25+deb9u7 systemd: out-of-bounds read when parsing a crafted syslog message

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16866

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-11 19:29 修改: 2026-06-17 01:44

libsystemd0 CVE-2018-16888 低危 232-25+deb9u2 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-14 22:29 修改: 2026-06-17 01:45

libsystemd0 CVE-2018-6954 低危 232-25+deb9u2 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-13 20:29 修改: 2026-06-17 02:02

openjdk-8-jdk-headless CVE-2018-2579 低危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2579

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jdk-headless CVE-2018-2790 低危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2790

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-2952 低危 8u151-b12-1~deb9u1 8u181-b13-1~deb9u1 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2952

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-07-18 13:29 修改: 2026-06-17 01:56

openjdk-8-jdk-headless CVE-2018-3136 低危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3136

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jdk-headless CVE-2018-3139 低危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3139

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jdk-headless CVE-2019-2422 低危 8u151-b12-1~deb9u1 8u212-b01-1~deb9u1 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2422

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-01-16 19:30 修改: 2026-06-17 02:33

openjdk-8-jdk-headless CVE-2019-2786 低危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2842 低危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2894 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2945 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2962 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2964 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2973 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2978 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2981 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2018-2579 低危 8u151-b12-1~deb9u1 8u162-b12-1~deb9u1 OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2579

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-01-18 02:29 修改: 2026-06-17 01:55

openjdk-8-jre-headless CVE-2018-2790 低危 8u151-b12-1~deb9u1 8u171-b11-1~deb9u1 OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2790

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-04-19 02:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-2952 低危 8u151-b12-1~deb9u1 8u181-b13-1~deb9u1 OpenJDK: insufficient index validation in PatternSyntaxException getMessage() (Concurrency, 8199547)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-2952

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-07-18 13:29 修改: 2026-06-17 01:56

openjdk-8-jre-headless CVE-2018-3136 低危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Incorrect handling of unsigned attributes in signed Jar manifests (Security, 8194534)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3136

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jre-headless CVE-2018-3139 低危 8u151-b12-1~deb9u1 8u181-b13-2~deb9u1 OpenJDK: Leak of sensitive header data via HTTP redirect (Networking, 8196902)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3139

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-10-17 01:31 修改: 2026-06-17 01:57

openjdk-8-jre-headless CVE-2019-2422 低危 8u151-b12-1~deb9u1 8u212-b01-1~deb9u1 OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2422

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-01-16 19:30 修改: 2026-06-17 02:33

openjdk-8-jre-headless CVE-2019-2786 低危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Insufficient restriction of privileges in AccessController (Security, 8216381)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2786

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2842 低危 8u151-b12-1~deb9u1 8u222-b10-1~deb9u1 OpenJDK: Missing array bounds check in crypto providers (JCE, 8223511)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2842

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-07-23 23:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2894 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Side-channel vulnerability in the ECDSA implementation (Security, 8228825)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2894

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2945 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Missing restrictions on use of custom SocketImpl (Networking, 8218573)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2945

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2962 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: NULL pointer dereference in DrawGlyphList (2D, 8222690)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2962

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2964 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown by Pattern processing crafted regular expression (Concurrency, 8222684)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2964

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2973 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown by XPathParser processing crafted XPath expression (JAXP, 8223505)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2973

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2978 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Incorrect handling of nested jar: URLs in Jar URL handler (Networking, 8223892)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2978

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2981 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown by XPath processing crafted XPath expression (JAXP, 8224532)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2981

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2983 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2987 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2988 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jre-headless CVE-2019-2992 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35

openjdk-8-jre-headless CVE-2020-14577 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14578 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14579 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14581 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14796 低危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-14798 低危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jre-headless CVE-2020-2583 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2590 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2654 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2659 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2754 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2755 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2756 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2757 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2020-2773 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jre-headless CVE-2021-2163 低危 8u151-b12-1~deb9u1 8u292-b10-0+deb9u1 OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2163

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-04-22 22:15 修改: 2026-06-17 03:48

openjdk-8-jre-headless CVE-2021-35588 低危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35588

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jre-headless CVE-2021-35603 低危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35603

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:17 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2019-2983 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Unexpected exception thrown during Font object deserialization (Serialization, 8224915)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2983

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2987 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Missing glyph bitmap image dimension check in FreetypeFontScaler (2D, 8225286)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2987

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2988 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Integer overflow in bounds check in SunGraphics2D (2D, 8225292)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2988

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:34

openjdk-8-jdk-headless CVE-2019-2992 低危 8u151-b12-1~deb9u1 8u232-b09-1~deb9u1 OpenJDK: Excessive memory allocation in CMap when reading TrueType font (2D, 8225597)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2992

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-10-16 18:15 修改: 2026-06-17 02:35

openjdk-8-jdk-headless CVE-2020-14577 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: HostnameChecker does not ensure X.509 certificate names are in normalized form (JSSE, 8237592)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14577

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14578 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Unexpected exception raised by DerInputStream (Libraries, 8237731)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14578

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14579 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Unexpected exception raised by DerValue.equals() (Libraries, 8237736)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14579

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14581 低危 8u151-b12-1~deb9u1 8u265-b01-0+deb9u1 OpenJDK: Information disclosure in color management (2D, 8238002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14581

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-07-15 18:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14796 低危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Missing permission check in path to URI conversion (Libraries, 8242680)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14796

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-14798 低危 8u151-b12-1~deb9u1 8u272-b10-0+deb9u1 OpenJDK: Missing maximum length check in WindowsNativeDispatcher.asNativeBuffer() (Libraries, 8242695)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14798

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-10-21 15:15 修改: 2026-06-17 02:55

openjdk-8-jdk-headless CVE-2020-2583 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Incorrect exception processing during deserialization in BeanContextSupport (Serialization, 8224909)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2583

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2590 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Improper checks of SASL message properties in GssKrb5Base (Security, 8226352)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2590

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2654 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2654

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2659 低危 8u151-b12-1~deb9u1 8u242-b08-1~deb9u1 OpenJDK: Incomplete enforcement of maxDatagramSockets limit in DatagramChannelImpl (Networking, 8231795)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2659

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-01-15 17:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2754 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Misplaced regular expression syntax error check in RegExpScanner (Scripting, 8223898)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2754

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2755 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect handling of empty string nodes in regular expression Parser (Scripting, 8223904)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2755

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openssl CVE-2017-3738 低危 1.1.0f-3+deb9u1 1.1.0f-3+deb9u2 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3738

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-12-07 16:29 修改: 2026-06-17 01:18

openssl CVE-2018-0733 低危 1.1.0f-3+deb9u1 1.1.0f-3+deb9u2 openssl: Implementation bug in PA-RISC CRYPTO_memcmp function allows attackers to forge authenticated messages in a reduced number of attempts

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0733

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-27 21:29 修改: 2026-06-17 01:31

openssl CVE-2019-1563 低危 1.1.0f-3+deb9u1 1.1.0l-1~deb9u1 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2019-09-10 17:15 修改: 2026-06-17 02:28

openjdk-8-jdk-headless CVE-2020-2756 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Incorrect handling of references to uninitialized class descriptors during deserialization (Serialization, 8224541)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2756

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2020-2757 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Uncaught InstantiationError exception in ObjectStreamClass (Serialization, 8224549)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2757

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

passwd CVE-2018-7169 低危 1:4.4-4.1 shadow-utils: newgidmap allows unprivileged user to drop supplementary groups potentially allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7169

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-02-15 20:29 修改: 2026-06-17 02:02

openjdk-8-jdk-headless CVE-2020-2773 低危 8u151-b12-1~deb9u1 8u252-b09-1~deb9u1 OpenJDK: Unexpected exceptions raised by DOMKeyInfoFactory and DOMXMLSignatureFactory (Security, 8231415)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-2773

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2020-04-15 14:15 修改: 2026-06-17 03:12

openjdk-8-jdk-headless CVE-2021-2163 低危 8u151-b12-1~deb9u1 8u292-b10-0+deb9u1 OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-2163

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-04-22 22:15 修改: 2026-06-17 03:48

openjdk-8-jdk-headless CVE-2021-35588 低危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Incomplete validation of inner class references in ClassFileParser (Hotspot, 8268071)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35588

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:16 修改: 2026-06-17 03:57

openjdk-8-jdk-headless CVE-2021-35603 低危 8u151-b12-1~deb9u1 8u312-b07-1~deb9u1 OpenJDK: Non-constant comparison during TLS handshakes (JSSE, 8269618)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35603

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2021-10-20 11:17 修改: 2026-06-17 03:57

libsystemd0 CVE-2019-3815 低危 232-25+deb9u2 232-25+deb9u8 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-01-28 15:29 修改: 2026-06-17 02:35

libc6 CVE-2018-11237 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-05-18 16:29 修改: 2026-06-17 01:35

libtinfo5 CVE-2018-19211 低危 6.0+20161126-1+deb9u2 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2018-11-12 19:29 修改: 2026-06-17 01:48

libtinfo5 CVE-2019-17594 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

libtinfo5 CVE-2019-17595 低危 6.0+20161126-1+deb9u2 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2019-10-14 21:15 修改: 2026-06-17 02:24

libk5crypto3 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01

libk5crypto3 CVE-2018-5730 低危 1.15-1+deb9u1 1.15-1+deb9u3 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2018-03-06 20:29 修改: 2026-06-17 02:00

gpgv CVE-2019-14855 低危 2.1.18-8~deb9u1 gnupg2: OpenPGP Key Certification Forgeries with SHA-1

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14855

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2020-03-20 16:15 修改: 2026-06-17 02:19

coreutils CVE-2016-2781 低危 8.26-3 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44

libfdisk1 CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

unzip CVE-2019-13232 低危 6.0-21 6.0-21+deb9u2 unzip: overlapping of files in ZIP container leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13232

镜像层: sha256:e6cc336fde0da8de480862857b2f900bba117dbe8e3ce273c243a6ccded14e08

发布日期: 2019-07-04 13:15 修改: 2026-06-17 02:16

bsdutils CVE-2021-37600 低危 1:2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

util-linux CVE-2021-37600 低危 2.29.2-1+deb9u1 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2021-07-30 14:15 修改: 2026-06-17 04:00

libc-bin CVE-2017-15670 低危 2.24-11+deb9u3 2.24-11+deb9u4 glibc: Buffer overflow in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15670

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 2017-10-20 17:29 修改: 2026-06-17 01:08

libkrb5-3 CVE-2017-11462 低危 1.15-1+deb9u1 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 2017-09-13 16:29 修改: 2026-06-17 01:01

openjdk-8-jdk-headless DLA-2412-2 未知 8u151-b12-1~deb9u1 8u275-b01-1~deb9u1 openjdk-8 - regression update

漏洞详情:

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsystemd0 DSA-4367-2 未知 232-25+deb9u2 232-25+deb9u8 systemd - regression update

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2424-1 未知 2018c-0+deb9u1 2020d-0+deb9u1 tzdata - new upstream version

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2509-1 未知 2018c-0+deb9u1 2020e-0+deb9u1 tzdata - new upstream version

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2542-1 未知 2018c-0+deb9u1 2021a-0+deb9u1 tzdata - new upstream version

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2797-1 未知 2018c-0+deb9u1 2021a-0+deb9u2 tzdata - new upstream version

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-2963-1 未知 2018c-0+deb9u1 2021a-0+deb9u3 tzdata - new timezone database

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tzdata DLA-3051-1 未知 2018c-0+deb9u1 2021a-0+deb9u4 tzdata - new timezone database

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libudev1 DSA-4367-2 未知 232-25+deb9u2 232-25+deb9u8 systemd - regression update

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libgnutls30 DLA-2759-1 未知 3.5.8-5+deb9u3 3.5.8-5+deb9u6 gnutls28 - security update

漏洞详情:

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libnss3 DLA-2836-2 未知 2:3.26.2-1.1+deb9u1 2:3.26.2-1.1+deb9u4 nss - regression update

漏洞详情:

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

ca-certificates DLA-2593-1 未知 20161130+nmu1 20200601~deb9u2 ca-certificates - whitelist Symantec CA

漏洞详情:

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

openjdk-8-jre-headless DLA-2412-2 未知 8u151-b12-1~deb9u1 8u275-b01-1~deb9u1 openjdk-8 - regression update

漏洞详情:

镜像层: sha256:ef9790e8a33d7adf3adda7ddc4fd27a18763b37bac30e7603a75c2e50b924f73

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

debian-archive-keyring DLA-2948-1 未知 2017.5 2017.5+deb9u2 debian-archive-keyring - security update

漏洞详情:

镜像层: sha256:3358360aedad76edf49d0022818228d959d20a4cccc55d01c32f8b62e226e2c2

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Java (jar)
低危漏洞:9 中危漏洞:39 高危漏洞:47 严重漏洞:15
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.apache.tomcat.embed:tomcat-embed-core CVE-2025-24813 严重 9.0.34 11.0.3, 10.1.35, 9.0.99 tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24813

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-03-10 17:15 修改: 2026-06-17 08:59

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41293 严重 9.0.34 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: HTTP/2 request headers not validated

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41293

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43512 严重 9.0.34 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43512

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43515 严重 9.0.34 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: tomcat: Improper Authorization allows security bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43515

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.springframework.boot:spring-boot-starter-web CVE-2022-22965 严重 2.2.7.RELEASE 2.5.12, 2.6.6 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-beans CVE-2022-22965 严重 5.2.6.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-web CVE-2016-1000027 严重 5.2.6.RELEASE 6.0.0 spring: HttpInvokerServiceExporter readRemoteInvocation method untrusted java deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1000027

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2020-01-02 23:15 修改: 2024-11-21 02:42

org.springframework:spring-webmvc CVE-2022-22965 严重 5.2.6.RELEASE 5.2.20.RELEASE, 5.3.18 spring-framework: RCE via Data Binding on JDK 9+

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22965

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.thymeleaf:thymeleaf CVE-2026-40477 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via security bypass in expression execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40477

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf CVE-2026-40478 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40478

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf CVE-2026-41901 严重 3.0.11.RELEASE 3.1.5.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41901

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 23:16 修改: 2026-06-17 10:47

org.thymeleaf:thymeleaf-spring5 CVE-2021-43466 严重 3.0.11.RELEASE 3.0.13.RELEASE Template injection in thymeleaf-spring5

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43466

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2021-11-09 12:15 修改: 2026-06-17 04:11

org.thymeleaf:thymeleaf-spring5 CVE-2026-40477 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via security bypass in expression execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40477

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf-spring5 CVE-2026-40478 严重 3.0.11.RELEASE 3.1.4.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40478

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-17 22:16 修改: 2026-07-15 02:21

org.thymeleaf:thymeleaf-spring5 CVE-2026-41901 严重 3.0.11.RELEASE 3.1.5.RELEASE thymeleaf: Thymeleaf: Server-Side Template Injection (SSTI) via expression execution bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41901

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 23:16 修改: 2026-06-17 10:47

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-11996 高危 9.0.34 10.0.0-M5, 9.0.35, 8.5.55 tomcat: specially crafted sequence of HTTP/2 requests can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11996

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2020-06-26 17:15 修改: 2026-06-17 02:51

org.apache.tomcat.embed:tomcat-embed-core CVE-2020-9484 高危 9.0.34 10.0.0-M5, 9.0.35, 8.5.55, 7.0.104 tomcat: deserialization flaw in session persistence storage leading to RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-9484

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2020-05-20 19:15 修改: 2026-06-17 03:28

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25122 高危 9.0.34 10.0.2, 9.0.43, 8.5.63 tomcat: Request mix-up with h2c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25122

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-25329 高危 9.0.34 10.0.2, 9.0.41, 8.5.61, 7.0.108 tomcat: Incomplete fix for CVE-2020-9484 (RCE via session persistence)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25329

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2021-03-01 12:15 修改: 2026-06-17 03:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2022-42252 高危 9.0.34 8.5.83, 9.0.68, 10.0.27, 10.1.1 tomcat: request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42252

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-11-01 09:15 修改: 2026-06-17 05:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-24998 高危 9.0.34 10.1.5, 11.0.0-M5, 8.5.88, 9.0.71 FileUpload: FileUpload DoS with excessive parts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24998

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-02-20 16:15 修改: 2026-06-17 05:40

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-46589 高危 9.0.34 11.0.0-M11, 10.1.16, 9.0.83, 8.5.96 tomcat: HTTP request smuggling via malformed trailer headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46589

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-11-28 16:15 修改: 2026-06-17 06:31

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-34750 高危 9.0.34 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Improper Handling of Exceptional Conditions

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34750

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-07-03 20:15 修改: 2026-06-17 07:34

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-38286 高危 9.0.34 11.0.0-M21, 10.1.25, 9.0.90 tomcat: Denial of Service in Tomcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38286

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-11-07 08:15 修改: 2026-06-17 07:39

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-50379 高危 9.0.34 11.0.2, 10.1.34, 9.0.98 tomcat: RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50379

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-12-17 13:15 修改: 2026-06-17 08:04

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-56337 高危 9.0.34 11.0.2, 10.1.34, 9.0.98 tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56337

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-12-20 16:15 修改: 2026-06-17 08:12

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48988 高危 9.0.34 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat DoS in multipart upload

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48988

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-48989 高危 9.0.34 11.0.10, 10.1.44, 9.0.108 tomcat: http/2 "MadeYouReset" DoS attack through HTTP/2 control frames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48989

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-08-13 13:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52520 高危 9.0.34 11.0.9, 10.1.43, 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52520

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-53506 高危 9.0.34 9.0.107, 10.1.43, 11.0.9 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53506

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-07-10 20:15 修改: 2026-06-17 09:38

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55752 高危 9.0.34 11.0.11, 10.1.45, 9.0.109 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Directory traversal via rewrite with possible RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55752

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:42

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-24880 高危 9.0.34 9.0.116, 10.1.52, 11.0.20 Apache Tomcat: Apache Tomcat: HTTP Request/Response Smuggling via invalid chunk extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24880

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:23

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-41284 高危 9.0.34 9.0.118, 10.1.55, 11.0.22 tomcat: Apache Tomcat: Denial of Service due to uncontrolled resource allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41284

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:46

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-42498 高危 9.0.34 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure due to HTTP Authentication Header exposure during WebSocket authentication.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42498

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:47

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43513 高危 9.0.34 9.0.118, 10.1.55, 11.0.22 tomcat-catalina: Apache Tomcat: Improper Handling of Case Sensitivity in LockOutRealm

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43513

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2020-13935 高危 9.0.34 7.0.105, 8.5.57, 9.0.37, 10.0.0-M7 tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13935

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2020-07-14 15:15 修改: 2026-06-17 02:53

org.springframework.boot:spring-boot CVE-2022-27772 高危 2.2.7.RELEASE 2.2.11.RELEASE Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27772

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-03-30 18:15 修改: 2026-06-17 04:37

org.springframework.boot:spring-boot CVE-2025-22235 高危 2.2.7.RELEASE 3.3.11, 3.4.5 org.springframework.boot/spring-boot: Spring Boot EndpointRequest.to() creates wrong matcher if actuator endpoint is not exposed

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22235

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-04-28 08:15 修改: 2026-06-17 08:45

org.springframework.boot:spring-boot CVE-2026-40973 高危 2.2.7.RELEASE 4.0.6, 3.5.14 Spring Boot: Spring Boot: Arbitrary Code Execution and Session Hijacking via predictable temporary directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40973

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-28 00:16 修改: 2026-06-17 10:45

org.springframework.boot:spring-boot-autoconfigure CVE-2023-20883 高危 2.2.7.RELEASE 3.0.7, 2.7.12, 2.6.15, 2.5.15 spring-boot: Spring Boot Welcome Page DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20883

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-05-26 17:15 修改: 2026-06-17 05:31

com.fasterxml.jackson.core:jackson-databind CVE-2020-25649 高危 2.10.4 2.6.7.4, 2.9.10.7, 2.10.5.1 jackson-databind: FasterXML DOMDeserializer insecure entity expansion is vulnerable to XML external entity (XXE)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25649

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2020-12-03 17:15 修改: 2026-06-17 03:07

com.fasterxml.jackson.core:jackson-databind CVE-2020-36518 高危 2.10.4 2.13.2.1, 2.12.6.1 jackson-databind: denial of service via a large depth of nested objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36518

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-03-11 07:15 修改: 2026-06-17 03:15

org.springframework:spring-beans CVE-2022-22970 高危 5.2.6.RELEASE 5.2.22.RELEASE, 5.3.20 springframework: DoS via data binding to multipartFile or servlet part

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22970

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-05-12 20:15 修改: 2026-06-17 04:29

org.springframework:spring-context CVE-2022-22968 高危 5.2.6.RELEASE 5.3.19, 5.2.21.RELEASE Framework: Data Binding Rules Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22968

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20863 高危 5.2.6.RELEASE 6.0.8, 5.3.27, 5.2.24.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20863

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-04-13 20:15 修改: 2026-06-17 05:31

com.fasterxml.jackson.core:jackson-databind CVE-2021-46877 高危 2.10.4 2.12.6, 2.13.1 jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46877

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-03-18 22:15 修改: 2026-06-17 04:15

org.springframework:spring-web CVE-2021-22118 高危 5.2.6.RELEASE 5.2.15, 5.3.7 spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22118

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2021-05-27 15:15 修改: 2026-06-17 03:36

org.springframework:spring-web CVE-2024-22243 高危 5.2.6.RELEASE 6.1.4, 6.0.17, 5.3.32 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22243

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-02-23 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22259 高危 5.2.6.RELEASE 6.1.5, 6.0.18, 5.3.33 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22259

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-03-16 05:15 修改: 2026-06-17 07:11

org.springframework:spring-web CVE-2024-22262 高危 5.2.6.RELEASE 5.3.34, 6.0.19, 6.1.6 springframework: URL Parsing with Host Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22262

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-04-16 06:15 修改: 2026-06-17 07:11

com.fasterxml.jackson.core:jackson-databind CVE-2022-42003 高危 2.10.4 2.12.7.1, 2.13.4.2 jackson-databind: deep wrapper array nesting wrt UNWRAP_SINGLE_VALUE_ARRAYS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42003

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

org.springframework:spring-webmvc CVE-2024-38819 高危 5.2.6.RELEASE 6.1.14 org.springframework:spring-webmvc: Path traversal vulnerability in functional web frameworks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38819

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-12-19 18:15 修改: 2026-06-17 07:41

com.fasterxml.jackson.core:jackson-databind CVE-2022-42004 高危 2.10.4 2.12.7.1, 2.13.4 jackson-databind: use of deeply nested arrays

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42004

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-10-02 05:15 修改: 2026-06-17 05:04

com.fasterxml.jackson.core:jackson-databind CVE-2026-54512 高危 2.10.4 2.18.8, 3.1.4, 2.21.4 jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54512

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:01

com.fasterxml.jackson.core:jackson-databind CVE-2026-54513 高危 2.10.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54513

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-06-23 21:17 修改: 2026-07-17 13:18

ch.qos.logback:logback-classic CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

ch.qos.logback:logback-core CVE-2023-6378 高危 1.2.3 1.3.12, 1.4.12, 1.2.13 logback: serialization vulnerability in logback receiver

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6378

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-11-29 12:15 修改: 2026-06-17 06:50

com.alibaba:fastjson CVE-2022-25845 高危 1.2.80 1.2.83 fastjson: autoType shutdown restriction bypass leads to deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25845

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-06-10 20:15 修改: 2026-06-17 04:34

com.fasterxml.jackson.core:jackson-core CVE-2025-52999 高危 2.10.4 2.15.0 com.fasterxml.jackson.core/jackson-core: jackson-core Potential StackoverflowError

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52999

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-06-25 17:15 修改: 2026-06-17 09:37

org.yaml:snakeyaml CVE-2017-18640 高危 1.25 1.26 snakeyaml: Billion laughs attack via alias feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18640

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2019-12-12 03:15 修改: 2026-06-17 01:13

org.yaml:snakeyaml CVE-2022-1471 高危 1.25 2.0 SnakeYaml: Constructor Deserialization Remote Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1471

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-12-01 11:15 修改: 2026-06-17 04:22

org.yaml:snakeyaml CVE-2022-25857 高危 1.25 1.31 snakeyaml: Denial of Service due to missing nested depth limitation for collections

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25857

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-08-30 05:15 修改: 2026-06-17 04:34

com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.10.4 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30

ch.qos.logback:logback-core CVE-2025-11226 中危 1.2.3 1.5.19, 1.3.16 ch.qos.logback/logback-core: Conditional abitrary code execution in logback-core

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11226

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-10-01 08:15 修改: 2026-06-25 17:16

ch.qos.logback:logback-core CVE-2021-42550 中危 1.2.3 1.2.9 logback: remote code execution through JNDI call from within its configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42550

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2021-12-16 19:15 修改: 2026-06-17 04:09

com.fasterxml.jackson.core:jackson-databind CVE-2026-50193 中危 2.10.4 2.14.0 jackson-databind: Jackson-databind: Denial of Service via deeply nested JSON processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50193

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-06-23 21:17 修改: 2026-06-27 21:05

com.fasterxml.jackson.core:jackson-databind CVE-2026-54514 中危 2.10.4 2.18.8, 2.21.4, 3.1.4 jackson-databind: jackson-databind: Information Disclosure via Eager DNS Resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54514

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-06-23 21:17 修改: 2026-06-27 20:55

com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.10.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38

org.apache.tomcat.embed:tomcat-embed-core CVE-2021-24122 中危 9.0.34 10.0.0-M10, 9.0.40, 8.5.60, 7.0.107 tomcat: Information disclosure when using NTFS file system

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-24122

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2021-01-14 15:15 修改: 2026-06-17 03:39

org.springframework:spring-context CVE-2024-38820 中危 5.2.6.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

org.springframework:spring-core CVE-2021-22060 中危 5.2.6.RELEASE 5.3.14, 5.2.19 springframework: Additional Log Injection in Spring Framework (follow-up to CVE-2021-22096)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22060

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-01-10 14:10 修改: 2026-06-17 03:36

org.springframework:spring-core CVE-2021-22096 中危 5.2.6.RELEASE 5.3.11, 5.2.18 springframework: malicious input leads to insertion of additional log entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22096

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2021-10-28 16:15 修改: 2026-06-17 03:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-41080 中危 9.0.34 8.5.93, 9.0.80, 10.1.13, 11.0.0-M11 tomcat: Open Redirect vulnerability in FORM authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-41080

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-08-25 21:15 修改: 2026-06-17 06:20

org.springframework:spring-expression CVE-2022-22950 中危 5.2.6.RELEASE 5.3.17, 5.2.20.RELEASE spring-expression: Denial of service via specially crafted SpEL expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22950

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-04-01 23:15 修改: 2026-06-17 04:29

org.springframework:spring-expression CVE-2023-20861 中危 5.2.6.RELEASE 6.0.7, 5.3.26, 5.2.23.RELEASE springframework: Spring Expression DoS Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-20861

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-03-23 21:15 修改: 2026-06-17 05:31

org.springframework:spring-expression CVE-2024-38808 中危 5.2.6.RELEASE 5.3.39 spring-expression: Denial of service when processing a specially crafted Spring Expression Language expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38808

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-08-20 08:15 修改: 2026-06-17 07:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-42795 中危 9.0.34 10.1.14, 9.0.81, 8.5.94, 11.0.0-M12 tomcat: improper cleaning of recycled objects could lead to information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42795

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-10-10 18:15 修改: 2026-06-17 06:24

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-44487 中危 9.0.34 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-10-10 14:15 修改: 2026-06-17 06:27

org.apache.tomcat.embed:tomcat-embed-core CVE-2023-45648 中危 9.0.34 11.0.0-M12, 10.1.14, 9.0.81, 8.5.94 tomcat: incorrectly parsed http trailer headers can cause request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45648

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2023-10-10 19:15 修改: 2026-06-17 06:28

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-21733 中危 9.0.34 8.5.64, 9.0.44 tomcat: Leaking of unrelated request bodies in default error page

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21733

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-01-19 11:15 修改: 2026-06-17 07:10

org.apache.tomcat.embed:tomcat-embed-core CVE-2024-24549 中危 9.0.34 8.5.99, 9.0.86, 10.1.19, 11.0.0-M17 Tomcat: HTTP/2 header handling DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24549

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:14

org.springframework:spring-web CVE-2024-38809 中危 5.2.6.RELEASE 5.3.38, 6.0.23, 6.1.12 org.springframework:spring-web: Spring Framework DoS via conditional HTTP request

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38809

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-09-27 17:15 修改: 2026-06-17 07:41

org.springframework:spring-web CVE-2024-38820 中危 5.2.6.RELEASE 6.1.14 The fix for CVE-2022-22968 made disallowedFieldspatterns in DataBinder ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38820

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-10-18 06:15 修改: 2026-06-17 07:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49124 中危 9.0.34 11.0.8, 10.1.42, 9.0.106 Apache Tomcat installer for Windows has an untrusted search path vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49124

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-49125 中危 9.0.34 11.0.8, 10.1.42, 9.0.106 tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49125

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-06-16 15:15 修改: 2026-06-17 09:30

org.springframework:spring-webmvc CVE-2026-22745 中危 5.2.6.RELEASE 7.0.7, 6.2.18 spring-webflux: Spring MVC and Spring WebFlux: Denial of Service via slow static resource resolution on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22745

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-52434 中危 9.0.34 9.0.107 tomcat: Apache Tomcat denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52434

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-07-10 19:15 修改: 2026-06-17 09:36

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-55668 中危 9.0.34 11.0.8, 10.1.42, 9.0.106 org.apache.tomcat/tomcat-catalina: tomcat: Apache Tomcat: session fixation via rewrite valve

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-55668

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-08-13 14:15 修改: 2026-06-17 09:41

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-66614 中危 9.0.34 11.0.15, 10.1.50, 9.0.113 tomcat: Client certificate verification bypass due to virtual host mapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66614

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-02-17 19:21 修改: 2026-06-17 09:57

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-25854 中危 9.0.34 9.0.116, 10.1.53, 11.0.20 Apache Tomcat: Apache Tomcat: Open Redirect vulnerability via LoadBalancerDrainingValve

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25854

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-09 20:16 修改: 2026-06-17 10:25

ch.qos.logback:logback-core CVE-2024-12798 中危 1.2.3 1.5.13, 1.3.15 logback-core: arbitrary code execution via JaninoEventEvaluator

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12798

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-12-19 16:15 修改: 2026-06-17 07:00

org.apache.tomcat.embed:tomcat-embed-websocket CVE-2024-23672 中危 9.0.34 11.0.0-M17, 10.1.19, 9.0.86, 8.5.99 Tomcat: WebSocket DoS with incomplete closing handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-23672

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-03-13 16:15 修改: 2026-06-17 07:13

org.hibernate.validator:hibernate-validator CVE-2020-10693 中危 6.0.19.Final 6.1.5.Final, 6.0.20.Final hibernate-validator: Improper input validation in the interpolation of constraint error messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10693

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2020-05-06 14:15 修改: 2026-06-17 02:48

org.hibernate.validator:hibernate-validator CVE-2023-1932 中危 6.0.19.Final 6.2.0.Final hibernate-validator: rendering of invalid html with SafeHTML leads to HTML injection and XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1932

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-11-07 10:15 修改: 2026-06-17 05:29

org.hibernate.validator:hibernate-validator CVE-2025-35036 中危 6.0.19.Final 6.2.0.CR1, 7.0.0.CR1 hibernate-validator: Hibernate Validator Expression Language Injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-35036

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-06-03 20:15 修改: 2026-06-17 09:14

com.fasterxml.jackson.core:jackson-core CVE-2025-49128 中危 2.10.4 2.13.0 com.fasterxml.jackson.core/jackson-core: Jackson-core Memory Disclosure via Source Snippet in JsonLocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49128

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-06-06 22:15 修改: 2026-06-17 09:30

org.yaml:snakeyaml CVE-2022-38749 中危 1.25 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38749

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38750 中危 1.25 1.31 snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38750

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38751 中危 1.25 1.31 snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38751

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-38752 中危 1.25 1.32 snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38752

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-09-05 10:15 修改: 2026-06-17 04:57

org.yaml:snakeyaml CVE-2022-41854 中危 1.25 1.32 dev-java/snakeyaml: DoS via stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41854

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2022-11-11 13:15 修改: 2026-06-17 05:03

org.apache.tomcat.embed:tomcat-embed-core CVE-2026-43514 低危 9.0.34 9.0.118, 10.1.55, 11.0.22 tomcat-coyote: Apache Tomcat: Information disclosure via AJP secret timing discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43514

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-12 16:16 修改: 2026-06-17 10:49

org.springframework:spring-context CVE-2025-22233 低危 5.2.6.RELEASE 6.2.7, 6.1.20 CVE-2024-38820 ensured Locale-independent, lowercase conversion for bo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22233

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-05-16 20:15 修改: 2026-06-17 08:45

org.springframework:spring-webmvc CVE-2026-22741 低危 5.2.6.RELEASE 7.0.7, 6.2.18 Spring MVC: Spring WebFlux: Spring MVC and Spring WebFlux: Denial of Service via cache poisoning

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22741

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-04-29 12:16 修改: 2026-06-17 10:20

ch.qos.logback:logback-core CVE-2026-9828 低危 1.2.3 1.5.33 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9828

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-05-28 14:16 修改: 2026-06-17 11:05

ch.qos.logback:logback-core CVE-2024-12801 低危 1.2.3 1.5.13, 1.3.15 logback-core: SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12801

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2024-12-19 17:15 修改: 2026-06-17 07:00

ch.qos.logback:logback-core CVE-2026-10532 低危 1.2.3 1.5.34 Deserialization of untrusted data vulnerability in QOS.CH Sarl logback ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10532

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-06-01 13:16 修改: 2026-06-17 10:12

ch.qos.logback:logback-core CVE-2026-1225 低危 1.2.3 1.5.25 ch.qos.logback/logback-core: Malicious logback.xml configuration file allows instantiation of arbitrary classes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1225

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2026-01-22 10:16 修改: 2026-06-17 10:15

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-46701 低危 9.0.34 9.0.105, 10.1.41, 11.0.7 tomcat: Apache Tomcat: Security constraint bypass for CGI scripts

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46701

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-05-29 19:15 修改: 2026-06-17 09:26

org.apache.tomcat.embed:tomcat-embed-core CVE-2025-61795 低危 9.0.34 11.0.12, 10.1.47, 9.0.110 tomcat: org.apache.tomcat/tomcat-catalina: Apache Tomcat: Denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61795

镜像层: sha256:7a81c60db4b192a4d31ba154b770139e160ae646e1356fba079c876bf78a02a5

发布日期: 2025-10-27 18:15 修改: 2026-06-17 09:50

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×