docker.io/linyuchen/pmhq:8.1.1 linux/amd64

docker.io/linyuchen/pmhq:8.1.1 - Trivy安全扫描结果 扫描时间: 2026-09-23 22:02
全部漏洞信息
低危漏洞:102 中危漏洞:542 高危漏洞:3 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-23 22:02

docker.io/linyuchen/pmhq:8.1.1 (ubuntu 24.04) (ubuntu)
低危漏洞:102 中危漏洞:542 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gpgv CVE-2025-68973 高危 2.4.4-2ubuntu17.3 2.4.4-2ubuntu17.4 GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59

libssl3t64 CVE-2026-45447 高危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-09-18 13:18

openssl CVE-2026-45447 高危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-09-18 13:18

bsdutils CVE-2026-53613 中危 1:2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bsdutils CVE-2026-53614 中危 1:2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bsdutils CVE-2026-53615 中危 1:2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

curl CVE-2026-11856 中危 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.12 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-03 07:16 修改: 2026-09-15 07:16

curl CVE-2026-13608 中危 8.5.0-2ubuntu10.11 curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-18924 中危 8.5.0-2ubuntu10.11 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-19931 中危 8.5.0-2ubuntu10.11 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-80230 中危 8.5.0-2ubuntu10.11 curl: curl: Public key pinning bypass allows unauthenticated connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

curl CVE-2026-82209 中危 8.5.0-2ubuntu10.11 curl: libcurl: Information disclosure via improper Public Suffix List boundary check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

diffutils CVE-2026-53910 中危 1:3.10-1build1 1:3.10-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16

dmsetup CVE-2026-19617 中危 2:1.02.185-3ubuntu3.2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-14 06:17 修改: 2026-09-01 13:18

dpkg CVE-2026-2219 中危 1.22.6ubuntu6.5 1.22.6ubuntu6.6 It was discovered that dpkg-deb (a component of dpkg, the Debian packa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2219

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-07 09:16 修改: 2026-06-17 10:30

gir1.2-glib-2.0 CVE-2025-13601 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-26 15:15 修改: 2026-08-31 18:17

gir1.2-glib-2.0 CVE-2025-14087 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-10 09:15 修改: 2026-08-25 10:18

gir1.2-glib-2.0 CVE-2025-14512 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-11 07:16 修改: 2026-09-01 12:17

gir1.2-glib-2.0 CVE-2026-0988 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.7 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-21 12:15 修改: 2026-06-17 10:11

gir1.2-glib-2.0 CVE-2026-1484 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

gir1.2-glib-2.0 CVE-2026-1485 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

gir1.2-glib-2.0 CVE-2026-1489 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 15:15 修改: 2026-06-17 10:15

gir1.2-glib-2.0 CVE-2026-15588 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-20 12:17 修改: 2026-09-10 18:17

gir1.2-glib-2.0 CVE-2026-16118 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-17 20:17 修改: 2026-09-21 12:17

gir1.2-glib-2.0 CVE-2026-58010 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

gir1.2-glib-2.0 CVE-2026-58011 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

gir1.2-glib-2.0 CVE-2026-58012 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

gir1.2-glib-2.0 CVE-2026-58013 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

gir1.2-glib-2.0 CVE-2026-58014 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-15 12:17

gir1.2-glib-2.0 CVE-2026-58015 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-15 12:17

gir1.2-glib-2.0 CVE-2026-58016 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

bsdutils CVE-2026-13595 中危 1:2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

gzip CVE-2026-41991 中危 1.12-1ubuntu3.1 1.12-1ubuntu3.2 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02

gzip CVE-2026-41992 中危 1.12-1ubuntu3.1 1.12-1ubuntu3.2 gzip: gzip: Information disclosure via global buffer overflow in LZH decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 12:16 修改: 2026-08-27 13:17

krb5-locales CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17

krb5-locales CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

krb5-locales CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libasound2-data CVE-2026-25068 中危 1.2.11-1ubuntu0.1 1.2.11-1ubuntu0.2 alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25068

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-29 20:16 修改: 2026-06-17 10:24

libasound2-data CVE-2026-56109 中危 1.2.11-1ubuntu0.1 1.2.11-1ubuntu0.3 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56109

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-22 18:16 修改: 2026-07-14 22:17

libasound2t64 CVE-2026-25068 中危 1.2.11-1ubuntu0.1 1.2.11-1ubuntu0.2 alsa-lib: alsa-lib Topology Decoder Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25068

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-29 20:16 修改: 2026-06-17 10:24

libasound2t64 CVE-2026-56109 中危 1.2.11-1ubuntu0.1 1.2.11-1ubuntu0.3 alsa-lib: ALSA library: Double-free vulnerability leading to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56109

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-22 18:16 修改: 2026-07-14 22:17

libattr1 CVE-2026-54371 中危 1:2.5.2-1build1.1 1:2.5.2-1ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 14:16 修改: 2026-09-11 13:18

libavahi-client3 CVE-2025-59529 中危 0.8-13ubuntu6 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-client3 CVE-2025-68276 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:58

libavahi-client3 CVE-2025-68468 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-client3 CVE-2025-68471 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-client3 CVE-2026-24401 中危 0.8-13ubuntu6 0.8-13ubuntu6.2 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-24 02:15 修改: 2026-06-17 10:23

libavahi-client3 CVE-2026-34933 中危 0.8-13ubuntu6 0.8-13ubuntu6.2 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 23:17 修改: 2026-07-24 22:10

libavahi-common-data CVE-2025-59529 中危 0.8-13ubuntu6 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-common-data CVE-2025-68276 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:58

libavahi-common-data CVE-2025-68468 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common-data CVE-2025-68471 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common-data CVE-2026-24401 中危 0.8-13ubuntu6 0.8-13ubuntu6.2 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-24 02:15 修改: 2026-06-17 10:23

libavahi-common-data CVE-2026-34933 中危 0.8-13ubuntu6 0.8-13ubuntu6.2 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 23:17 修改: 2026-07-24 22:10

libavahi-common3 CVE-2025-59529 中危 0.8-13ubuntu6 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46

libavahi-common3 CVE-2025-68276 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:58

libavahi-common3 CVE-2025-68468 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common3 CVE-2025-68471 中危 0.8-13ubuntu6 0.8-13ubuntu6.1 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 18:15 修改: 2026-06-17 09:59

libavahi-common3 CVE-2026-24401 中危 0.8-13ubuntu6 0.8-13ubuntu6.2 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-24 02:15 修改: 2026-06-17 10:23

libavahi-common3 CVE-2026-34933 中危 0.8-13ubuntu6 0.8-13ubuntu6.2 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 23:17 修改: 2026-07-24 22:10

libblkid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libblkid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libblkid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libc-bin CVE-2025-15281 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

libc-bin CVE-2026-0861 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.7 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc-bin CVE-2026-0915 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libc-bin CVE-2026-18374 中危 2.39-0ubuntu8.6 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-19499 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17

libc-bin CVE-2026-19542 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17

libc-bin CVE-2026-4046 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

libc-bin CVE-2026-4437 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

libc-bin CVE-2026-4438 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

libc-bin CVE-2026-5435 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc-bin CVE-2026-5450 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-5928 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc-bin CVE-2026-6238 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libc-bin CVE-2026-6368 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-6791 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc-bin CVE-2026-77117 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17

libc-bin CVE-2026-80489 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17

libc6 CVE-2025-15281 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

libc6 CVE-2026-0861 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.7 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc6 CVE-2026-0915 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libc6 CVE-2026-18374 中危 2.39-0ubuntu8.6 glibc: glibc: Heap buffer overflow via attacker-controlled fopen mode string

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18374

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-27 20:17 修改: 2026-09-03 16:43

libc6 CVE-2026-19499 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Buffer Overflow in strfmon right-justification padding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19499

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17

libc6 CVE-2026-19542 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Fix out-of-bounds array write in tdelete

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-14 18:17 修改: 2026-09-18 18:17

libc6 CVE-2026-4046 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

libc6 CVE-2026-4437 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

libc6 CVE-2026-4438 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18

libc6 CVE-2026-5435 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

libc6 CVE-2026-5450 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-5928 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libc6 CVE-2026-6238 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

libc6 CVE-2026-6368 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: glibc: Process abort due to invalid memory in wordexp

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-6791 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-10 19:17 修改: 2026-09-03 16:43

libc6 CVE-2026-77117 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Non-progress DoS in SHIFT_JISX0213 -&gt

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-77117

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17

libc6 CVE-2026-80489 中危 2.39-0ubuntu8.6 2.39-0ubuntu8.9 glibc: Non-progress DoS in EUC_JISX0213 -> UCS-4 conversion state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80489

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-15 11:17 修改: 2026-09-18 18:17

libcap2 CVE-2026-4878 中危 1:2.66-5ubuntu2.2 1:2.66-5ubuntu2.4 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-09 16:16 修改: 2026-09-09 13:20

libcups2t64 CVE-2025-58436 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.9 cups: Slow client communication leads to a possible DoS attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58436

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-29 03:15 修改: 2026-06-17 09:44

libcups2t64 CVE-2025-61915 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.7 CUPS: Local denial-of-service via cupsd.conf update and related issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61915

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-29 03:15 修改: 2026-06-17 09:51

libcups2t64 CVE-2026-27447 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: OpenPrinting CUPS: Authorization bypass via case-insensitive username comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27447

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libcups2t64 CVE-2026-34978 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: OpenPrinting CUPS: Denial of Service via path traversal in RSS notifier

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34978

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 22:16 修改: 2026-07-20 20:10

libcups2t64 CVE-2026-34979 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: OpenPrinting CUPS: Denial of Service via heap-based buffer overflow in job attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34979

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 22:16 修改: 2026-07-24 21:10

libcups2t64 CVE-2026-34980 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: OpenPrinting CUPS: Shared PostScript queue lets anonymous Print-Job requests reach `lp` code execution over the network

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34980

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 22:16 修改: 2026-07-24 21:10

libcups2t64 CVE-2026-34990 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: OpenPrinting CUPS: Privilege escalation via arbitrary file overwrite due to coerced authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34990

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 22:16 修改: 2026-07-24 21:10

libcups2t64 CVE-2026-39314 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: CUPS: Denial of Service via integer underflow in IPP attribute handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39314

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41

libcups2t64 CVE-2026-39316 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: CUPS: Denial of Service and potential arbitrary code execution via use-after-free vulnerability when deleting temporary printers.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39316

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 17:16 修改: 2026-06-17 10:41

libcups2t64 CVE-2026-41079 中危 2.4.7-1.2ubuntu7.4 2.4.7-1.2ubuntu7.13 cups: CUPS: Information disclosure via crafted SNMP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41079

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

libcurl4t64 CVE-2026-11856 中危 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.12 curl: curl: Information disclosure via incorrect Digest authentication header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11856

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-03 07:16 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-13608 中危 8.5.0-2ubuntu10.11 curl: curl: Authentication bypass in OpenLDAP SASL negotiation via Man-in-the-Middle (MITM) attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13608

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-18924 中危 8.5.0-2ubuntu10.11 curl: libcurl: Use-after-free in HTTP/2 Server Push with shared connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18924

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-19931 中危 8.5.0-2ubuntu10.11 curl: libcurl: Information disclosure via incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19931

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-80230 中危 8.5.0-2ubuntu10.11 curl: curl: Public key pinning bypass allows unauthenticated connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-80230

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libcurl4t64 CVE-2026-82209 中危 8.5.0-2ubuntu10.11 curl: libcurl: Information disclosure via improper Public Suffix List boundary check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-82209

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-09-06 18:17 修改: 2026-09-15 07:16

libdevmapper1.02.1 CVE-2026-19617 中危 2:1.02.185-3ubuntu3.2 libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-14 06:17 修改: 2026-09-01 13:18

libegl-mesa0 CVE-2026-40393 中危 25.0.7-0ubuntu0.24.04.2 25.2.8-0ubuntu0.24.04.2 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libexpat1 CVE-2025-59375 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46

libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.3 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56

libexpat1 CVE-2026-24515 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.4 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-23 08:16 修改: 2026-06-17 10:23

libexpat1 CVE-2026-25210 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.4 libexpat: libexpat: Information disclosure and data integrity issues due to integer overflow in buffer reallocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25210

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-30 07:16 修改: 2026-06-17 10:24

libexpat1 CVE-2026-32776 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32777 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-32778 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 14:19 修改: 2026-07-14 13:18

libexpat1 CVE-2026-41080 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-16 17:16 修改: 2026-07-14 13:18

libexpat1 CVE-2026-45186 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-10 07:16 修改: 2026-09-16 13:17

libexpat1 CVE-2026-50219 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-04 06:16 修改: 2026-07-22 20:10

libexpat1 CVE-2026-56131 中危 2.6.1-2ubuntu0.3 libexpat: libexpat: Use-after-free vulnerability due to insufficient handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56131

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56132 中危 2.6.1-2ubuntu0.3 expat: libexpat: Arbitrary Code Execution via Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56132

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-19 06:17 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56403 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: libexpat: Arbitrary code execution due to integer overflow in storeAtts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56403

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56404 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: libexpat: Arbitrary Code Execution via integer overflow in addBinding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56404

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:15

libexpat1 CVE-2026-56405 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: libexpat: Information disclosure and arbitrary code execution via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56405

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 20:14

libexpat1 CVE-2026-56406 中危 2.6.1-2ubuntu0.3 libexpat: libexpat: Arbitrary code execution via integer overflow in XML_ParseBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56406

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:29

libexpat1 CVE-2026-56407 中危 2.6.1-2ubuntu0.3 libexpat: libexpat: Arbitrary code execution due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56407

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:28

libexpat1 CVE-2026-56408 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat before 2.8.2 has an integer overflow in copyString.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56408

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:27

libexpat1 CVE-2026-56409 中危 2.6.1-2ubuntu0.3 xmlwf in libexpat before 2.8.2 has an integer overflow for the output ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56409

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:21

libexpat1 CVE-2026-56410 中危 2.6.1-2ubuntu0.3 libexpat: libexpat: Integer overflow in xmlwf can lead to information disclosure and arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56410

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 16:16 修改: 2026-06-23 16:18

libexpat1 CVE-2026-56411 中危 2.6.1-2ubuntu0.3 expat: libexpat: Integer Overflow Vulnerability Leading to Information Disclosure or Code Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56411

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 17:16 修改: 2026-06-23 16:16

libexpat1 CVE-2026-56412 中危 2.6.1-2ubuntu0.3 2.6.1-2ubuntu0.5 libexpat: libexpat: Use-after-free vulnerability due to improper handling of XML CDATA sections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56412

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-21 17:16 修改: 2026-06-23 15:31

libexpat1 CVE-2026-66046 中危 2.6.1-2ubuntu0.3 expat: Expat: Denial of Service via quadratic complexity in attribute processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-66046

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-18 15:16 修改: 2026-09-18 15:07

libexpat1 CVE-2026-72522 中危 2.6.1-2ubuntu0.3 expat: libexpat: Denial of Service due to incorrect Unicode surrogate handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-72522

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 04:16 修改: 2026-08-31 19:33

libexpat1 CVE-2026-76641 中危 2.6.1-2ubuntu0.3 expat: Expat: Denial of Service via XML external entity parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76641

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-20 18:16 修改: 2026-08-20 19:17

libexpat1 CVE-2026-76957 中危 2.6.1-2ubuntu0.3 libexpat: libexpat: Memory corruption vulnerability allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-76957

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-20 05:16 修改: 2026-09-08 20:56

libfdisk1 CVE-2026-13595 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libfdisk1 CVE-2026-27456 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libfdisk1 CVE-2026-53612 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libfdisk1 CVE-2026-53613 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libfdisk1 CVE-2026-53614 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libfdisk1 CVE-2026-53615 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libfreetype6 CVE-2026-23865 中危 2.13.2+dfsg-1build3 2.13.2+dfsg-1ubuntu0.1 freetype: Information disclosure or denial of service via specially crafted font files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-23865

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-02 17:16 修改: 2026-06-17 10:22

libgbm1 CVE-2026-40393 中危 25.0.7-0ubuntu0.24.04.2 25.2.8-0ubuntu0.24.04.2 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libgcrypt20 CVE-2026-41989 中危 1.10.3-2build1 1.10.3-2ubuntu0.1 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18

libgdk-pixbuf-2.0-0 CVE-2026-5201 中危 2.42.10+dfsg-3ubuntu3.2 2.42.10+dfsg-3ubuntu3.3 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

libgdk-pixbuf2.0-bin CVE-2026-5201 中危 2.42.10+dfsg-3ubuntu3.2 2.42.10+dfsg-3ubuntu3.3 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

libgdk-pixbuf2.0-common CVE-2026-5201 中危 2.42.10+dfsg-3ubuntu3.2 2.42.10+dfsg-3ubuntu3.3 gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5201

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-31 09:16 修改: 2026-07-15 01:16

libgl1-mesa-dri CVE-2026-40393 中危 25.0.7-0ubuntu0.24.04.2 25.2.8-0ubuntu0.24.04.2 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libglib2.0-0t64 CVE-2025-13601 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-26 15:15 修改: 2026-08-31 18:17

libglib2.0-0t64 CVE-2025-14087 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-10 09:15 修改: 2026-08-25 10:18

libglib2.0-0t64 CVE-2025-14512 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-11 07:16 修改: 2026-09-01 12:17

libglib2.0-0t64 CVE-2026-0988 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.7 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-21 12:15 修改: 2026-06-17 10:11

libglib2.0-0t64 CVE-2026-1484 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-0t64 CVE-2026-1485 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-0t64 CVE-2026-1489 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 15:15 修改: 2026-06-17 10:15

libglib2.0-0t64 CVE-2026-15588 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-20 12:17 修改: 2026-09-10 18:17

libglib2.0-0t64 CVE-2026-16118 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-17 20:17 修改: 2026-09-21 12:17

libglib2.0-0t64 CVE-2026-58010 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-0t64 CVE-2026-58011 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-0t64 CVE-2026-58012 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-0t64 CVE-2026-58013 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-0t64 CVE-2026-58014 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-15 12:17

libglib2.0-0t64 CVE-2026-58015 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-15 12:17

libglib2.0-0t64 CVE-2026-58016 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

libglib2.0-data CVE-2025-13601 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-26 15:15 修改: 2026-08-31 18:17

libglib2.0-data CVE-2025-14087 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-10 09:15 修改: 2026-08-25 10:18

libglib2.0-data CVE-2025-14512 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-11 07:16 修改: 2026-09-01 12:17

libglib2.0-data CVE-2026-0988 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.7 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-21 12:15 修改: 2026-06-17 10:11

libglib2.0-data CVE-2026-1484 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-data CVE-2026-1485 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 14:15 修改: 2026-06-17 10:15

libglib2.0-data CVE-2026-1489 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.8 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 15:15 修改: 2026-06-17 10:15

libglib2.0-data CVE-2026-15588 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-20 12:17 修改: 2026-09-10 18:17

libglib2.0-data CVE-2026-16118 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16118

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-17 20:17 修改: 2026-09-21 12:17

libglib2.0-data CVE-2026-58010 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-data CVE-2026-58011 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-data CVE-2026-58012 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-data CVE-2026-58013 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-10 18:18

libglib2.0-data CVE-2026-58014 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-15 12:17

libglib2.0-data CVE-2026-58015 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-09-15 12:17

libglib2.0-data CVE-2026-58016 中危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.9 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

libglx-mesa0 CVE-2026-40393 中危 25.0.7-0ubuntu0.24.04.2 25.2.8-0ubuntu0.24.04.2 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

libgnutls30t64 CVE-2025-14831 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.5 gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-02-09 15:16 修改: 2026-09-01 12:17

libgnutls30t64 CVE-2026-33845 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-30 18:16 修改: 2026-09-18 13:18

libgnutls30t64 CVE-2026-33846 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-04 10:15 修改: 2026-09-18 13:18

libgnutls30t64 CVE-2026-3832 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-30 18:16 修改: 2026-09-01 13:19

libgnutls30t64 CVE-2026-3833 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-30 18:16 修改: 2026-09-17 19:16

libgnutls30t64 CVE-2026-42009 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-18 13:16 修改: 2026-09-18 13:18

libgnutls30t64 CVE-2026-42010 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-07 12:16 修改: 2026-09-18 13:18

libgnutls30t64 CVE-2026-42011 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-07 15:16 修改: 2026-09-03 15:17

libgnutls30t64 CVE-2026-42012 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19

libgnutls30t64 CVE-2026-42013 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17

libgnutls30t64 CVE-2026-42014 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-16 02:16 修改: 2026-09-01 13:19

libgnutls30t64 CVE-2026-42015 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19

libgnutls30t64 CVE-2026-5260 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17

libgnutls30t64 CVE-2026-5419 中危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-01 21:16 修改: 2026-09-01 13:19

libgraphite2-3 CVE-2026-50593 中危 1.3.14-2build1 1.3.14-2ubuntu0.24.04.1 Graphite before 1.3.15 has an integer underflow and resultant out-of-b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50593

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-05 04:17 修改: 2026-07-23 07:10

libgssapi-krb5-2 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17

libgssapi-krb5-2 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libgssapi-krb5-2 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libhtml-parser-perl CVE-2026-8829 中危 3.81-1build3 3.81-1ubuntu0.1 HTML::Entities versions before 3.84 for Perl read freed heap memory in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8829

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-04 03:16 修改: 2026-07-22 20:10

libhttp-daemon-perl CVE-2026-8450 中危 6.16-1 6.16-1ubuntu0.24.04.1 perl-HTTP-Daemon: HTTP::Daemon: Arbitrary code execution via OS command injection in send_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8450

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 05:16 修改: 2026-07-23 11:10

libhttp-date-perl CVE-2026-14741 中危 6.06-1 6.06-1ubuntu0.24.04.1 HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via poly ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14741

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-17 16:17 修改: 2026-08-12 19:17

libk5crypto3 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17

libk5crypto3 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libk5crypto3 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libkrb5-3 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17

libkrb5-3 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libkrb5-3 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

libkrb5support0 CVE-2026-11850 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-11 10:16 修改: 2026-08-31 18:17

libkrb5support0 CVE-2026-40355 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18

libkrb5support0 CVE-2026-40356 中危 1.20.1-6ubuntu2.6 1.20.1-6ubuntu2.7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48

liblcms2-2 CVE-2026-41254 中危 2.14-2build1 2.14-2ubuntu0.1 Little CMS: lcms2: mm2/Little-CMS: Little CMS: Information disclosure or denial of service via integer overflow in CubeSize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41254

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-18 07:16 修改: 2026-06-17 10:46

libmount1 CVE-2026-13595 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libmount1 CVE-2026-53612 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libmount1 CVE-2026-53613 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libmount1 CVE-2026-53614 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libmount1 CVE-2026-53615 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libnss-systemd CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libnss-systemd CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libnss-systemd CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libnss-systemd CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libnss-systemd CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libnss3 CVE-2026-12318 中危 2:3.98-1build1 2:3.98-1ubuntu0.2 firefox: thunderbird: Incorrect boundary conditions in the Libraries component in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12318

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-16 13:16 修改: 2026-06-17 14:26

libnss3 CVE-2026-2781 中危 2:3.98-1build1 2:3.98-1ubuntu0.1 firefox: thunderbird: Integer overflow in the Libraries component in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2781

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-02-24 14:16 修改: 2026-06-17 10:31

libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18

libp11-kit0 CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07

libpam-modules CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-modules-bin CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-runtime CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libpam-systemd CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libpam-systemd CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libpam-systemd CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libpam-systemd CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libpam-systemd CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libpam0g CVE-2026-54411 中危 1.5.3-5ubuntu5.5 1.5.3-5ubuntu5.6 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

libperl5.38t64 CVE-2025-15649 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

libperl5.38t64 CVE-2026-12087 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

libperl5.38t64 CVE-2026-13221 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:16 修改: 2026-09-08 22:17

libperl5.38t64 CVE-2026-15534 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

libperl5.38t64 CVE-2026-19487 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

libperl5.38t64 CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

libperl5.38t64 CVE-2026-42497 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

libperl5.38t64 CVE-2026-48959 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

libperl5.38t64 CVE-2026-48962 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

libperl5.38t64 CVE-2026-57432 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:17 修改: 2026-09-08 22:18

libperl5.38t64 CVE-2026-57433 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

libperl5.38t64 CVE-2026-7017 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

libperl5.38t64 CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 00:16 修改: 2026-09-08 22:19

libperl5.38t64 CVE-2026-9538 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

libpixman-1-0 CVE-2023-37769 中危 0.42.2-1build1 stress-test master commit e4c878 was discovered to contain a FPE vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2023-07-17 20:15 修改: 2026-06-17 06:08

libpng16-16t64 CVE-2025-28162 中危 1.6.43-5build1 1.6.43-5ubuntu0.4 libpng: libpng: Denial of Service via buffer overflow in pngimage utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28162

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

libpng16-16t64 CVE-2025-28164 中危 1.6.43-5build1 1.6.43-5ubuntu0.4 libpng: libpng: Denial of Service via buffer overflow in png_create_read_struct() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-28164

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:04

libpng16-16t64 CVE-2025-64505 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG heap buffer overflow via malformed palette index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64505

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng16-16t64 CVE-2025-64506 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG heap buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64506

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:54

libpng16-16t64 CVE-2025-64720 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64720

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng16-16t64 CVE-2025-65018 中危 1.6.43-5build1 1.6.43-5ubuntu0.1 libpng: LIBPNG heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-65018

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-11-25 00:15 修改: 2026-06-17 09:55

libpng16-16t64 CVE-2025-66293 中危 1.6.43-5build1 1.6.43-5ubuntu0.3 libpng: LIBPNG out-of-bounds read in png_image_read_composite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66293

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-03 21:15 修改: 2026-06-17 09:56

libpng16-16t64 CVE-2026-22695 中危 1.6.43-5build1 1.6.43-5ubuntu0.3 libpng: libpng: Denial of service and information disclosure via heap buffer over-read in png_image_finish_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22695

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng16-16t64 CVE-2026-22801 中危 1.6.43-5build1 1.6.43-5ubuntu0.3 libpng: libpng: Information disclosure and denial of service via integer truncation in simplified write API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22801

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-12 23:15 修改: 2026-06-17 10:20

libpng16-16t64 CVE-2026-25646 中危 1.6.43-5build1 1.6.43-5ubuntu0.5 libpng: LIBPNG has a heap buffer overflow in png_set_quantize

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25646

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-02-10 18:16 修改: 2026-08-11 13:17

libpng16-16t64 CVE-2026-33416 中危 1.6.43-5build1 1.6.43-5ubuntu0.6 libpng: libpng: Arbitrary code execution due to use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33416

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

libpng16-16t64 CVE-2026-33636 中危 1.6.43-5build1 1.6.43-5ubuntu0.6 libpng: libpng: Information disclosure and denial of service via out-of-bounds read/write in Neon palette expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33636

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-26 17:16 修改: 2026-06-17 10:37

libpng16-16t64 CVE-2026-34757 中危 1.6.43-5build1 1.6.43-5ubuntu0.6 libpng: libpng: Information disclosure and data corruption via use-after-free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34757

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-09 15:16 修改: 2026-06-17 10:39

libpython3.12-minimal CVE-2025-11468 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

libpython3.12-minimal CVE-2025-12084 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

libpython3.12-minimal CVE-2025-13462 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2025-13836 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.10 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

libpython3.12-minimal CVE-2025-13837 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

libpython3.12-minimal CVE-2025-15282 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

libpython3.12-minimal CVE-2025-6075 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

libpython3.12-minimal CVE-2025-69534 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-05 15:16 修改: 2026-09-07 13:17

libpython3.12-minimal CVE-2025-8291 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

libpython3.12-minimal CVE-2026-0672 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.12-minimal CVE-2026-0865 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.12-minimal CVE-2026-1299 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

libpython3.12-minimal CVE-2026-1502 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-15308 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

libpython3.12-minimal CVE-2026-2297 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-3276 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-3644 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-4224 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-4360 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-4519 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-4786 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-6019 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

libpython3.12-minimal CVE-2026-6100 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-7774 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-8328 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: FTP connection redirection via ftpcp() function bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

libpython3.12-minimal CVE-2026-9669 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2025-11468 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

libpython3.12-stdlib CVE-2025-12084 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

libpython3.12-stdlib CVE-2025-13462 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2025-13836 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.10 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

libpython3.12-stdlib CVE-2025-13837 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

libpython3.12-stdlib CVE-2025-15282 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

libpython3.12-stdlib CVE-2025-6075 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

libpython3.12-stdlib CVE-2025-69534 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-05 15:16 修改: 2026-09-07 13:17

libpython3.12-stdlib CVE-2025-8291 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

libpython3.12-stdlib CVE-2026-0672 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.12-stdlib CVE-2026-0865 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

libpython3.12-stdlib CVE-2026-1299 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

libpython3.12-stdlib CVE-2026-1502 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-15308 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

libpython3.12-stdlib CVE-2026-2297 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-3276 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-3644 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-4224 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-4360 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-4519 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-4786 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-6019 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

libpython3.12-stdlib CVE-2026-6100 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-7774 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-8328 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: FTP connection redirection via ftpcp() function bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

libpython3.12-stdlib CVE-2026-9669 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

libsmartcols1 CVE-2026-13595 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libsmartcols1 CVE-2026-53612 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsmartcols1 CVE-2026-53613 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsmartcols1 CVE-2026-53614 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsmartcols1 CVE-2026-53615 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libsqlite3-0 CVE-2026-11822 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.6 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

libsqlite3-0 CVE-2026-11824 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.6 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

libsqlite3-0 CVE-2026-39113 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.8 Buffer Overflow vulnerability in SQLite affected version source s ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39113

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-25 21:17 修改: 2026-09-09 16:04

libsqlite3-0 CVE-2026-50812 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.7 sqlite: SQLite: Denial of Service via malformed changeset in Session Extension

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50812

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

libsqlite3-0 CVE-2026-50813 中危 3.45.1-1ubuntu2.5 3.45.1-1ubuntu2.7 sqlite: SQLite: Information disclosure via Session Extension changeset merge path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50813

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-08 18:16 修改: 2026-07-09 19:48

libssh-4 CVE-2026-59843 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via zero advertised channel packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59843

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59845 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59845

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59846 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: information disclosure via ProxyCommand %r username expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59846

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-21 13:17 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59847 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59847

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-21 14:16 修改: 2026-09-04 19:23

libssh-4 CVE-2026-59848 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: denial of service via SFTP responses with unknown request IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59848

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-21 14:16 修改: 2026-09-01 21:18

libssh-4 CVE-2026-59850 中危 0.10.6-2ubuntu0.4 0.10.6-2ubuntu0.5 libssh: libssh: use-after-free via data callbacks on closed channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59850

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-21 15:16 修改: 2026-09-01 21:18

bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libssl3t64 CVE-2025-15467 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17

libssl3t64 CVE-2026-31790 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-34182 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-45445 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-63072 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

libssl3t64 CVE-2026-63076 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

libsystemd-shared CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libsystemd-shared CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libsystemd-shared CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libsystemd-shared CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd-shared CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd0 CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libsystemd0 CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libsystemd0 CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libsystemd0 CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd0 CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtasn1-6 CVE-2025-13151 中危 4.19.0-3ubuntu0.24.04.1 4.19.0-3ubuntu0.24.04.2 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

libudev1 CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libudev1 CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

libudev1 CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libudev1 CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libuuid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

libuuid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libuuid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libuuid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libuuid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libwww-perl CVE-2026-8368 中危 6.76-1 6.76-1ubuntu0.1 perl-libwww-perl: perl-libwww-perl: Information disclosure via cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8368

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-12 15:16 修改: 2026-06-17 11:03

libxfont2 CVE-2026-56001 中危 1:2.0.6-1build1 1:2.0.6-1+deb13u1build0.24.04.2 libXfont2: BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56001

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-08 09:16 修改: 2026-07-09 19:46

libxfont2 CVE-2026-56002 中危 1:2.0.6-1build1 1:2.0.6-1+deb13u1build0.24.04.2 libXfont2: PCF Font Parsing Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56002

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-08 10:16 修改: 2026-07-13 13:57

libxfont2 CVE-2026-56003 中危 1:2.0.6-1build1 1:2.0.6-1+deb13u1build0.24.04.2 libXfont2: computeProps Property Buffer Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56003

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-08 10:16 修改: 2026-07-09 19:50

libxml-parser-perl CVE-2006-10002 中危 2.47-1build3 2.47-1ubuntu0.24.04.1 perl-xml-parser: XML::Parser for Perl: Heap corruption and denial of service from crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2006-10002

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-19 12:16 修改: 2026-03-23 00:16

libxml-parser-perl CVE-2006-10003 中危 2.47-1build3 2.47-1ubuntu0.24.04.1 perl-xml-parser: XML::Parser: Memory corruption via deeply nested XML files

漏洞详情: https://avd.aquasec.com/nvd/cve-2006-10003

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-19 12:16 修改: 2026-07-15 02:16

libxml2 CVE-2025-7425 中危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.6 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-07-10 14:15 修改: 2026-09-21 17:17

libxml2 CVE-2026-0989 中危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.7 libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-15 15:15 修改: 2026-09-01 13:18

libxml2 CVE-2026-0990 中危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.7 libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-15 15:15 修改: 2026-09-01 12:17

libxml2 CVE-2026-0992 中危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.7 libxml2: libxml2: Denial of Service via crafted XML catalogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-15 15:15 修改: 2026-09-01 13:18

libxml2 CVE-2026-6653 中危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.8 libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6653

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-22 14:17 修改: 2026-07-14 16:00

libxml2 CVE-2026-74860 中危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.9 libxml2: double-free/UAF in libxml2 Python bindings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-74860

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-09-08 12:16 修改: 2026-09-10 20:17

libxml2 CVE-2026-86140 中危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.9 libxml2: libxml2: Arbitrary code execution via stack-based buffer overflow in xmlSnprintfElements

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-86140

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-09-05 05:17 修改: 2026-09-15 19:39

libxpm4 CVE-2026-4367 中危 1:3.5.17-1build2 1:3.5.17-1ubuntu0.24.04.1 libXpm: libXpm: Denial of Service via out-of-bounds read in XPM file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4367

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-16 19:16 修改: 2026-07-28 10:16

mesa-libgallium CVE-2026-40393 中危 25.0.7-0ubuntu0.24.04.2 25.2.8-0ubuntu0.24.04.2 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

mesa-vulkan-drivers CVE-2026-40393 中危 25.0.7-0ubuntu0.24.04.2 25.2.8-0ubuntu0.24.04.2 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory acces ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40393

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-12 19:16 修改: 2026-07-13 10:16

mount CVE-2026-13595 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

mount CVE-2026-27456 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

mount CVE-2026-53612 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-53613 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-53614 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2026-53615 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bsdutils CVE-2026-53612 中危 1:2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

openssl CVE-2025-15467 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17

openssl CVE-2026-31790 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-34182 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-45445 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-63072 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl CVE-2026-63076 中危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

perl CVE-2025-15649 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl CVE-2026-12087 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl CVE-2026-13221 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:16 修改: 2026-09-08 22:17

perl CVE-2026-15534 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl CVE-2026-19487 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

perl CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl CVE-2026-42497 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

perl CVE-2026-48959 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl CVE-2026-48962 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl CVE-2026-57432 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:17 修改: 2026-09-08 22:18

perl CVE-2026-57433 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl CVE-2026-7017 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

perl CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 00:16 修改: 2026-09-08 22:19

perl CVE-2026-9538 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

perl-base CVE-2025-15649 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-base CVE-2026-12087 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl-base CVE-2026-13221 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-07-13 17:16 修改: 2026-09-08 22:17

perl-base CVE-2026-15534 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl-base CVE-2026-19487 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

perl-base CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl-base CVE-2026-42497 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

perl-base CVE-2026-48959 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-base CVE-2026-48962 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl-base CVE-2026-57432 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-07-13 17:17 修改: 2026-09-08 22:18

perl-base CVE-2026-57433 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl-base CVE-2026-7017 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

perl-base CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 00:16 修改: 2026-09-08 22:19

perl-base CVE-2026-9538 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

perl-modules-5.38 CVE-2025-15649 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-modules-5.38 CVE-2026-12087 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14

perl-modules-5.38 CVE-2026-13221 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:16 修改: 2026-09-08 22:17

perl-modules-5.38 CVE-2026-15534 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Arbitrary code execution via out-of-bounds memory access in regular expression engine.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-09 18:16 修改: 2026-09-08 22:17

perl-modules-5.38 CVE-2026-19487 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.6 perl: Perl: Incorrect regular expression matching can lead to wrong access or filtering decisions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-13 16:17 修改: 2026-08-28 15:42

perl-modules-5.38 CVE-2026-42496 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl-modules-5.38 CVE-2026-42497 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10

perl-modules-5.38 CVE-2026-48959 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10

perl-modules-5.38 CVE-2026-48962 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23

perl-modules-5.38 CVE-2026-57432 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:17 修改: 2026-09-08 22:18

perl-modules-5.38 CVE-2026-57433 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47

perl-modules-5.38 CVE-2026-7017 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56

perl-modules-5.38 CVE-2026-8376 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.3 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 00:16 修改: 2026-09-08 22:19

perl-modules-5.38 CVE-2026-9538 中危 5.38.2-3.2ubuntu0.2 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10

python3.12 CVE-2025-11468 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

python3.12 CVE-2025-12084 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

python3.12 CVE-2025-13462 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

python3.12 CVE-2025-13836 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.10 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

python3.12 CVE-2025-13837 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

python3.12 CVE-2025-15282 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

python3.12 CVE-2025-6075 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

python3.12 CVE-2025-69534 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-05 15:16 修改: 2026-09-07 13:17

python3.12 CVE-2025-8291 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

python3.12 CVE-2026-0672 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.12 CVE-2026-0865 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.12 CVE-2026-1299 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

python3.12 CVE-2026-1502 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-15308 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

python3.12 CVE-2026-2297 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-3276 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-3644 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-4224 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-4360 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-4519 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-4786 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-6019 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

python3.12 CVE-2026-6100 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-7774 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-8328 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: FTP connection redirection via ftpcp() function bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

python3.12 CVE-2026-9669 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

python3.12-minimal CVE-2025-11468 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:30

python3.12-minimal CVE-2025-12084 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31

python3.12-minimal CVE-2025-13462 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: cpython: `tarfile` module misinterprets crafted tar archives leading to data integrity issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13462

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-12 18:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2025-13836 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.10 cpython: Excessive read buffering DoS in http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13836

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

python3.12-minimal CVE-2025-13837 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-12-01 18:16 修改: 2026-09-03 03:15

python3.12-minimal CVE-2025-15282 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37

python3.12-minimal CVE-2025-6075 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-31 17:15 修改: 2026-07-31 14:16

python3.12-minimal CVE-2025-69534 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python-markdown: denial of service via malformed HTML-like sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69534

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-05 15:16 修改: 2026-09-07 13:17

python3.12-minimal CVE-2025-8291 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.9 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-07 18:16 修改: 2026-07-31 14:16

python3.12-minimal CVE-2026-0672 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.12-minimal CVE-2026-0865 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.11 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11

python3.12-minimal CVE-2026-1299 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: email header injection due to unquoted newlines

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15

python3.12-minimal CVE-2026-1502 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 18:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-15308 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

python3.12-minimal CVE-2026-2297 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-04 23:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-3276 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-03 16:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-3644 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-4224 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-16 18:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-4360 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.17 python: Python Tarfile: Unexpected file ownership when extracting hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4360

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-30 15:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-4519 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-20 15:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-4786 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 22:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-6019 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-22 20:16 修改: 2026-07-27 17:34

python3.12-minimal CVE-2026-6100 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-13 18:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-7774 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: CPython: Python tarfile: Arbitrary file write via crafted link entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7774

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-04 16:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-8328 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: FTP connection redirection via ftpcp() function bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8328

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-05-13 21:16 修改: 2026-08-13 01:16

python3.12-minimal CVE-2026-9669 中危 3.12.3-1ubuntu0.8 3.12.3-1ubuntu0.15 python: Python: Denial of Service via out-of-bounds write in BZ2 decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9669

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-08 23:17 修改: 2026-08-13 01:16

sed CVE-2026-5958 中危 4.9-2build1 4.9-2ubuntu0.24.04.1 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59

systemd CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-dev CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-dev CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-dev CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-dev CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-dev CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-resolved CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-resolved CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-resolved CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-resolved CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-resolved CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-sysv CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-sysv CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-sysv CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-sysv CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-sysv CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-timesyncd CVE-2026-15059 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-timesyncd CVE-2026-16742 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.17 systemd: systemd-homed: Local privilege escalation via missing home-record signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54

systemd-timesyncd CVE-2026-29111 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

systemd-timesyncd CVE-2026-40225 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.14 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-timesyncd CVE-2026-40226 中危 255.4-1ubuntu8.11 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

tar CVE-2025-45582 中危 1.35+dfsg-3build1 1.35+dfsg-3ubuntu0.2 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25

tar CVE-2026-18477 中危 1.35+dfsg-3build1 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-03 17:16 修改: 2026-09-22 22:17

tar CVE-2026-18508 中危 1.35+dfsg-3build1 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-03 16:16 修改: 2026-09-22 22:17

tar CVE-2026-5704 中危 1.35+dfsg-3build1 1.35+dfsg-3ubuntu0.4 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-06 16:16 修改: 2026-09-22 22:17

util-linux CVE-2026-13595 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17

util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10

util-linux CVE-2026-53612 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

util-linux CVE-2026-53613 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

util-linux CVE-2026-53614 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

util-linux CVE-2026-53615 中危 2.39.3-9ubuntu6.3 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

wget CVE-2021-31879 中危 1.21.4-1ubuntu4.1 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52

wget CVE-2026-15146 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.4 wget: Wget: Server-Side Request Forgery via FTP PASV response IP address validation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15146

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-10 19:17 修改: 2026-07-15 19:16

wget CVE-2026-58469 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Memory corruption via crafted Metalink URL

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58469

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:59

wget CVE-2026-58470 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Integer overflow in Content-Range header parsing causes download desynchronization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58470

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:01

wget CVE-2026-58471 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58471

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-07 21:17 修改: 2026-07-09 16:02

wget CVE-2026-58472 中危 1.21.4-1ubuntu4.1 1.21.4-1ubuntu4.3 wget: GNU Wget: Arbitrary code execution or denial of service via crafted HTML attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58472

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-07-07 21:17 修改: 2026-07-09 15:58

xdg-utils CVE-2025-52968 中危 1.1.3-4.1ubuntu3 xdg-utils: xdg-open bypassing SameSite=Strict

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52968

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-06-23 15:15 修改: 2026-06-17 09:37

xserver-common CVE-2025-62229 中危 2:21.1.12-1ubuntu1.4 2:21.1.12-1ubuntu1.5 xorg: xmayland: Use-after-free in XPresentNotify structure creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62229

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-30 06:15 修改: 2026-06-17 09:51

xserver-common CVE-2025-62230 中危 2:21.1.12-1ubuntu1.4 2:21.1.12-1ubuntu1.5 xorg: xwayland: Use-after-free in Xkb client resource removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62230

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-30 06:15 修改: 2026-07-01 15:13

xserver-common CVE-2025-62231 中危 2:21.1.12-1ubuntu1.4 2:21.1.12-1ubuntu1.5 xorg: xmayland: Value overflow in XkbSetCompatMap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62231

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-30 05:15 修改: 2026-07-01 15:17

xvfb CVE-2025-62229 中危 2:21.1.12-1ubuntu1.4 2:21.1.12-1ubuntu1.5 xorg: xmayland: Use-after-free in XPresentNotify structure creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62229

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-30 06:15 修改: 2026-06-17 09:51

xvfb CVE-2025-62230 中危 2:21.1.12-1ubuntu1.4 2:21.1.12-1ubuntu1.5 xorg: xwayland: Use-after-free in Xkb client resource removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62230

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-30 06:15 修改: 2026-07-01 15:13

xvfb CVE-2025-62231 中危 2:21.1.12-1ubuntu1.4 2:21.1.12-1ubuntu1.5 xorg: xmayland: Value overflow in XkbSetCompatMap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-62231

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-10-30 05:15 修改: 2026-07-01 15:17

zlib1g CVE-2026-85091 中危 1:1.3.dfsg-3.1ubuntu2.1 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vul ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-85091

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-09-03 13:06 修改: 2026-09-09 20:41

libssl3t64 CVE-2025-69418 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69419 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69420 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69421 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2026-22795 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3t64 CVE-2026-22796 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3t64 CVE-2026-28387 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-28388 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

ncurses-base CVE-2025-6141 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

ncurses-base CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

ncurses-bin CVE-2025-6141 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

ncurses-bin CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2026-28389 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-28390 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-31789 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-34180 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42766 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42767 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42770 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2025-68160 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

openssl CVE-2025-69418 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69419 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69420 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2025-69421 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl CVE-2026-22795 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-22796 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl CVE-2026-28387 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-28388 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-28389 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-28390 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-31789 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.9 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl CVE-2026-34180 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-42766 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-42767 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-42770 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-45446 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-54874 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl CVE-2026-63074 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

openssl CVE-2026-7383 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl CVE-2026-75803 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

openssl CVE-2026-9076 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

libssl3t64 CVE-2026-45446 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-54874 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

libssl3t64 CVE-2026-63074 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:16

libssl3t64 CVE-2026-7383 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-75803 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.15 openssl: openssl: AEAD forgeries possible with empty ciphertext in EVP_Cipher()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-08-25 13:19 修改: 2026-09-11 21:17

libssl3t64 CVE-2026-9076 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.11 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libglib2.0-data CVE-2025-6052 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer overflow in g_string_maybe_expand() leading to potential buffer overflow in GLib GString

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6052

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-06-13 16:15 修改: 2026-06-17 10:01

systemd CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libglib2.0-data CVE-2025-7039 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-09-03 02:15 修改: 2026-06-17 10:04

gir1.2-glib-2.0 CVE-2025-7039 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-09-03 02:15 修改: 2026-06-17 10:04

libcairo-gobject2 CVE-2017-7475 低危 1.18.0-3build1 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24

libcairo-gobject2 CVE-2018-18064 低危 1.18.0-3build1 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

libsystemd-shared CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

systemd-dev CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libcairo2 CVE-2017-7475 低危 1.18.0-3build1 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24

libcairo2 CVE-2018-18064 低危 1.18.0-3build1 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46

liblzma5 CVE-2026-34743 低危 5.6.1+really5.4.5-1ubuntu0.2 5.6.1+really5.4.5-1ubuntu0.3 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10

libglib2.0-0t64 CVE-2025-3360 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-04-07 13:15 修改: 2026-06-30 15:16

libglib2.0-0t64 CVE-2025-6052 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer overflow in g_string_maybe_expand() leading to potential buffer overflow in GLib GString

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6052

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-06-13 16:15 修改: 2026-06-17 10:01

systemd-resolved CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libglib2.0-0t64 CVE-2025-7039 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-09-03 02:15 修改: 2026-06-17 10:04

libtiff6 CVE-2025-61143 低危 4.5.1+git230720-4ubuntu2.4 4.5.1+git230720-4ubuntu2.5 libtiff: libtiff: Denial of Service via NULL pointer dereference in tif_open.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61143

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtiff6 CVE-2025-61144 低危 4.5.1+git230720-4ubuntu2.4 4.5.1+git230720-4ubuntu2.5 libtiff: libtiff: Denial of Service via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61144

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-02-23 19:22 修改: 2026-06-17 09:50

libtinfo6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

systemd-sysv CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libtinfo6 CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libgcrypt20 CVE-2024-2236 低危 1.10.3-2build1 1.10.3-2ubuntu0.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24

libcurl4t64 CVE-2026-8932 低危 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.13 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-03 07:16 修改: 2026-09-15 07:16

libavahi-common-data CVE-2024-52615 低危 0.8-13ubuntu6 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libncursesw6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01

systemd-timesyncd CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libncursesw6 CVE-2025-69720 低危 6.4+20240113-1ubuntu2 6.4+20240113-1ubuntu2.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libavahi-common-data CVE-2024-52616 低危 0.8-13ubuntu6 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libelf1t64 CVE-2025-1352 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38

libelf1t64 CVE-2025-1376 低危 0.190-1.1ubuntu0.1 elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39

libavahi-client3 CVE-2024-52615 低危 0.8-13ubuntu6 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libgnutls30t64 CVE-2025-9820 低危 3.8.3-1.1ubuntu3.4 3.8.3-1.1ubuntu3.5 gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-26 20:16 修改: 2026-09-01 13:18

libnss-systemd CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libavahi-client3 CVE-2024-52616 低危 0.8-13ubuntu6 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libbz2-1.0 CVE-2026-42250 低危 1.0.8-5.1build0.1 1.0.8-5.1ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47

curl CVE-2026-8932 低危 8.5.0-2ubuntu10.11 8.5.0-2ubuntu10.13 libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932

镜像层: sha256:72e4aa0c247496fb18a8cee0ba3f27d1a9f77005b7c4b7c2ed7c9e96b454abea

发布日期: 2026-07-03 07:16 修改: 2026-09-15 07:16

gpgv CVE-2026-57062 低危 2.4.4-2ubuntu17.3 2.4.4-2ubuntu17.6 GnuPG: Incorrect cryptographic message parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57062

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-06-23 18:18 修改: 2026-06-25 20:16

libharfbuzz0b CVE-2026-22693 低危 8.3.0-2build2 harfbuzz: Null Pointer Dereference in harfbuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20

coreutils CVE-2025-5278 低危 9.4-3ubuntu6.1 9.4-3ubuntu6.3 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2025-05-27 21:15 修改: 2026-09-22 16:17

gir1.2-glib-2.0 CVE-2025-3360 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-04-07 13:15 修改: 2026-06-30 15:16

libavahi-common3 CVE-2024-52615 低危 0.8-13ubuntu6 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

libicu74 CVE-2025-5222 低危 74.2-1ubuntu3.1 icu: Stack buffer overflow in the SRBRoot::addTag function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-05-27 21:15 修改: 2026-09-17 19:16

xdg-utils CVE-2022-4055 低危 1.1.3-4.1ubuntu3 xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4055

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2022-11-19 00:15 修改: 2026-06-17 05:19

libavahi-common3 CVE-2024-52616 低危 0.8-13ubuntu6 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16

gir1.2-glib-2.0 CVE-2025-6052 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glib: Integer overflow in g_string_maybe_expand() leading to potential buffer overflow in GLib GString

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6052

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-06-13 16:15 修改: 2026-06-17 10:01

libglib2.0-data CVE-2025-3360 低危 2.80.0-6ubuntu3.4 2.80.0-6ubuntu3.6 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-04-07 13:15 修改: 2026-06-30 15:16

xserver-common CVE-2023-5574 低危 2:21.1.12-1ubuntu1.4 xorg-x11-server: Use-after-free bug in DamageDestroy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5574

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2023-10-25 20:15 修改: 2026-06-23 18:17

libpam-systemd CVE-2026-40228 低危 255.4-1ubuntu8.11 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libxml2 CVE-2025-8732 低危 2.9.14+dfsg-1.3ubuntu3.5 2.9.14+dfsg-1.3ubuntu3.7 libxml2: libxml2: Uncontrolled Recursion Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8732

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2025-08-08 17:15 修改: 2026-07-01 15:25

libssl3t64 CVE-2025-68160 低危 3.0.13-0ubuntu3.6 3.0.13-0ubuntu3.7 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

xvfb CVE-2023-5574 低危 2:21.1.12-1ubuntu1.4 xorg-x11-server: Use-after-free bug in DamageDestroy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5574

镜像层: sha256:00ec16960dbb17f6f37ccbe3c2be07f7db064802685eefbc4d344e54a0423783

发布日期: 2023-10-25 20:15 修改: 2026-06-23 18:17

login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12

zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 1:1.3.dfsg-3.1ubuntu2.2 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:073ec47a8c22dcaa4d6e5758799ccefe2f9bde943685830b1bf6fd2395f5eabc

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×