docker.io/library/almalinux:8.10 linux/amd64

docker.io/library/almalinux:8.10 - Trivy安全扫描结果 扫描时间: 2026-08-12 17:25
全部漏洞信息
低危漏洞:4 中危漏洞:17 高危漏洞:11 严重漏洞:0

系统OS: alma 8.10 扫描引擎: Trivy 扫描时间: 2026-08-12 17:25

docker.io/library/almalinux:8.10 (alma 8.10) (alma)
低危漏洞:4 中危漏洞:17 高危漏洞:11 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
acl CVE-2026-54369 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-29 14:16 修改: 2026-08-10 13:19

acl CVE-2026-54370 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

expat CVE-2026-45186 高危 2.5.0-1.el8_10 2.5.0-2.el8_10 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10

glib2 CVE-2026-58016 高危 2.56.4-169.el8_10 2.56.4-170.el8_10 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-30 13:19 修改: 2026-08-11 10:17

libacl CVE-2026-54369 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-29 14:16 修改: 2026-08-10 13:19

libacl CVE-2026-54370 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

openssl-libs CVE-2026-45447 高危 1:1.1.1k-15.el8_6 1:1.1.1k-16.el8_6 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-09 17:17 修改: 2026-08-10 13:19

vim-minimal CVE-2026-55693 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17

vim-minimal CVE-2026-57455 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23

vim-minimal CVE-2026-57456 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-minimal CVE-2026-59858 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

glibc-common CVE-2026-6238 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5435 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5450 中危 2.28-251.el8_10.37 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5928 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-6238 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc CVE-2026-5435 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc CVE-2026-5450 中危 2.28-251.el8_10.37 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libgcrypt CVE-2026-41989 中危 1.8.5-7.el8_6 1.8.5-8.el8_10 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18

libsolv CVE-2026-48864 中危 0.7.20-6.el8 0.7.20-7.el8_10 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-05-26 17:16 修改: 2026-08-11 10:17

glibc CVE-2026-5928 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

openssl-libs CVE-2026-28390 中危 1:1.1.1k-15.el8_6 1:1.1.1k-17.el8_6 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

glibc CVE-2026-6238 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-common CVE-2026-5435 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-common CVE-2026-5450 中危 2.28-251.el8_10.37 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-5928 中危 2.28-251.el8_10.37 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

vim-minimal CVE-2026-35177 中危 2:8.0.1763-22.el8_10.3 2:8.0.1763-23.el8_10 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-06 18:16 修改: 2026-07-24 21:10

vim-minimal CVE-2026-41411 中危 2:8.0.1763-22.el8_10.3 2:8.0.1763-24.el8_10 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

libxml2 CVE-2024-34459 低危 2.9.7-21.el8_10.4 2.9.7-21.el8_10.5 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33

openssl-libs CVE-2024-4741 低危 1:1.1.1k-15.el8_6 1:1.1.1k-16.el8_6 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

libxml2 CVE-2025-6170 低危 2.9.7-21.el8_10.4 2.9.7-21.el8_10.6 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2025-06-16 16:15 修改: 2026-08-11 10:17

libtasn1 CVE-2025-13151 低危 4.13-5.el8_10 4.13-6.el8_10 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:b888ac4757c4fa3a076b2951bef718beb3c3da8726d21ccb1ce44ff76c4ce145

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×