docker.io/mariadb/maxscale:23.08 linux/amd64

docker.io/mariadb/maxscale:23.08 - Trivy安全扫描结果 扫描时间: 2026-08-29 14:10
全部漏洞信息
低危漏洞:5 中危漏洞:36 高危漏洞:49 严重漏洞:0

系统OS: rocky 8.9 扫描引擎: Trivy 扫描时间: 2026-08-29 14:10

docker.io/mariadb/maxscale:23.08 (rocky 8.9) (rocky)
低危漏洞:5 中危漏洞:36 高危漏洞:49 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
acl CVE-2026-54369 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-29 14:16 修改: 2026-08-25 13:19

acl CVE-2026-54370 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

curl CVE-2026-8286 高危 7.61.1-34.el8_10.11 7.61.1-34.el8_10.13 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

expat CVE-2026-45186 高危 2.5.0-1.el8_10 2.5.0-2.el8_10 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19

glib2 CVE-2026-58016 高危 2.56.4-169.el8_10 2.56.4-170.el8_10 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18

gnutls CVE-2026-33845 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-30 18:16 修改: 2026-08-27 13:17

gnutls CVE-2026-33846 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-04 10:15 修改: 2026-08-27 13:17

gnutls CVE-2026-3833 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-30 18:16 修改: 2026-08-26 23:17

gnutls CVE-2026-42009 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-18 13:16 修改: 2026-08-27 13:17

gnutls CVE-2026-42010 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-07 12:16 修改: 2026-08-27 13:17

gnutls CVE-2026-42011 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-07 15:16 修改: 2026-08-27 17:18

gnutls CVE-2026-42012 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18

gnutls CVE-2026-42013 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-26 22:16 修改: 2026-08-26 17:17

gnutls CVE-2026-42014 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-16 02:16 修改: 2026-08-25 10:18

gnutls CVE-2026-42015 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18

gnutls CVE-2026-5260 高危 3.6.16-8.el8_10.5 3.6.16-8.el8_10.6 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-26 22:16 修改: 2026-08-26 17:17

libacl CVE-2026-54369 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-29 14:16 修改: 2026-08-25 13:19

libacl CVE-2026-54370 高危 2.2.53-3.el8 2.4.0-1.el8_10 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

libcurl-minimal CVE-2026-8286 高危 7.61.1-34.el8_10.11 7.61.1-34.el8_10.13 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42

openssl CVE-2026-45447 高危 1:1.1.1k-15.el8_10 1:1.1.1k-16.el8_10 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19

openssl-libs CVE-2026-45447 高危 1:1.1.1k-15.el8_10 1:1.1.1k-16.el8_10 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19

platform-python CVE-2026-11940 高危 3.6.8-76.el8_10.rocky.0 3.6.8-78.el8_10.rocky.0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

platform-python CVE-2026-15308 高危 3.6.8-76.el8_10.rocky.0 3.6.8-77.el8_10.rocky.0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

python3-libs CVE-2026-11940 高危 3.6.8-76.el8_10.rocky.0 3.6.8-78.el8_10.rocky.0 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16

python3-libs CVE-2026-15308 高危 3.6.8-76.el8_10.rocky.0 3.6.8-77.el8_10.rocky.0 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02

python3-unbound CVE-2026-40622 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Cache manipulation via 'ghost domain names' attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40622

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-24 10:10

python3-unbound CVE-2026-41292 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Denial of Service via excessive EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41292

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-08-26 13:18

python3-unbound CVE-2026-42534 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42534

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-29 13:18

python3-unbound CVE-2026-42944 高危 1.16.2-5.9.el8 1.16.2-5.11.el8_10 unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42944

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-08-26 13:19

python3-unbound CVE-2026-42959 高危 1.16.2-5.9.el8 1.16.2-5.11.el8_10 unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42959

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-24 10:10

python3-unbound CVE-2026-44390 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44390

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-29 13:18

python3-unbound CVE-2026-44690 高危 1.16.2-5.9.el8 1.16.2-5.14.el8_10 unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44690

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-07-22 14:17 修改: 2026-07-24 13:57

sqlite-libs CVE-2026-11822 高危 3.26.0-20.el8_10 3.26.0-21.el8_10 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

sqlite-libs CVE-2026-11824 高危 3.26.0-20.el8_10 3.26.0-21.el8_10 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

unbound-libs CVE-2026-40622 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Cache manipulation via 'ghost domain names' attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40622

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-24 10:10

unbound-libs CVE-2026-41292 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Denial of Service via excessive EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41292

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-08-26 13:18

unbound-libs CVE-2026-42534 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Denial of Service due to degraded resolution performance in jostle logic

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42534

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-29 13:18

unbound-libs CVE-2026-42944 高危 1.16.2-5.9.el8 1.16.2-5.11.el8_10 unbound: Heap overflow and crash with multiple nsid, cookie, padding EDNS options

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42944

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-08-26 13:19

unbound-libs CVE-2026-42959 高危 1.16.2-5.9.el8 1.16.2-5.11.el8_10 unbound: Unbound DNSSEC Validator Denial of Service via Incorrect Write Offset Counter in Chase-Reply Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42959

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-24 10:10

unbound-libs CVE-2026-44390 高危 1.16.2-5.9.el8 1.16.2-5.12.el8_10 unbound: Unbound: Denial of Service due to excessive resource consumption with large DNS Resource Record Sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44390

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-20 10:16 修改: 2026-07-29 13:18

unbound-libs CVE-2026-44690 高危 1.16.2-5.9.el8 1.16.2-5.14.el8_10 unbound: Unbound: Cache poisoning via insufficient RRSIG.Labels validation and premature cache writes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44690

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-07-22 14:17 修改: 2026-07-24 13:57

vim-minimal CVE-2026-46483 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-27.el8_10 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-05-15 15:16 修改: 2026-06-17 10:53

vim-minimal CVE-2026-47162 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-27.el8_10 vim: Vim: Arbitrary Code Execution via crafted directory names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47162

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-11 19:16 修改: 2026-08-25 13:19

vim-minimal CVE-2026-47167 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-27.el8_10 vim: Vim: Arbitrary code execution via crafted step-definition patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47167

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:54

vim-minimal CVE-2026-52858 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-27.el8_10 vim: Vim: Arbitrary code execution via Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52858

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:57

vim-minimal CVE-2026-55693 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17

vim-minimal CVE-2026-57455 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23

vim-minimal CVE-2026-57456 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16

vim-minimal CVE-2026-59858 高危 2:8.0.1763-22.el8_10.3 2:8.0.1763-31.el8_10 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16

openssl CVE-2026-28390 中危 1:1.1.1k-15.el8_10 1:1.1.1k-17.el8_10 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

glibc-langpack-en CVE-2026-4046 中危 2.28-251.el8_10.34 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

openssl-libs CVE-2026-28390 中危 1:1.1.1k-15.el8_10 1:1.1.1k-17.el8_10 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

pam CVE-2026-54411 中危 1.3.1-39.el8_10 1.3.1-40.el8_10 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17

glibc-langpack-en CVE-2026-5435 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-langpack-en CVE-2026-5450 中危 2.28-251.el8_10.34 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-langpack-en CVE-2026-5928 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-langpack-en CVE-2026-6238 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-4046 中危 2.28-251.el8_10.34 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc-minimal-langpack CVE-2026-5435 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5450 中危 2.28-251.el8_10.34 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5928 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-6238 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc CVE-2026-4046 中危 2.28-251.el8_10.34 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc CVE-2026-5435 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

python3-unbound CVE-2022-3204 中危 1.16.2-5.9.el8 1.16.2-5.14.el8_10 unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3204

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2022-09-26 14:15 修改: 2026-06-17 04:59

glibc CVE-2026-5450 中危 2.28-251.el8_10.34 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-5928 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-6238 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-common CVE-2026-4046 中危 2.28-251.el8_10.34 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc-common CVE-2026-5435 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-common CVE-2026-5450 中危 2.28-251.el8_10.34 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-5928 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-6238 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-gconv-extra CVE-2026-4046 中危 2.28-251.el8_10.34 2.28-251.el8_10.37 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

unbound-libs CVE-2022-3204 中危 1.16.2-5.9.el8 1.16.2-5.10.el8_10 unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3204

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2022-09-26 14:15 修改: 2026-06-17 04:59

glibc-gconv-extra CVE-2026-5435 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-gconv-extra CVE-2026-5450 中危 2.28-251.el8_10.34 2.28-251.el8_10.38 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libattr CVE-2026-54371 中危 2.4.48-3.el8 2.6.0-1.el8_10 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:c1827ee010dbe3d0e7aa85282da0a80f74f02da1c44d6e81313cccdf465e58c6

发布日期: 2026-06-29 14:16 修改: 2026-08-27 13:18

glibc-gconv-extra CVE-2026-5928 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libgcrypt CVE-2026-41989 中危 1.8.5-7.el8_6 1.8.5-8.el8_10 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:c1827ee010dbe3d0e7aa85282da0a80f74f02da1c44d6e81313cccdf465e58c6

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18

libnghttp2 CVE-2026-58055 中危 1.33.0-6.el8_10.2 1.33.0-6.el8_10.3 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41

libsolv CVE-2026-48864 中危 0.7.20-6.el8 0.7.20-7.el8_10 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864

镜像层: sha256:c1827ee010dbe3d0e7aa85282da0a80f74f02da1c44d6e81313cccdf465e58c6

发布日期: 2026-05-26 17:16 修改: 2026-08-26 23:17

glibc-gconv-extra CVE-2026-6238 中危 2.28-251.el8_10.34 2.28-251.el8_10.40 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

vim-minimal CVE-2026-35177 中危 2:8.0.1763-22.el8_10.3 2:8.0.1763-23.el8_10 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-06 18:16 修改: 2026-07-24 21:10

vim-minimal CVE-2026-41411 中危 2:8.0.1763-22.el8_10.3 2:8.0.1763-24.el8_10 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

libtasn1 CVE-2025-13151 低危 4.13-5.el8_10 4.13-6.el8_10 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

openssl-libs CVE-2024-4741 低危 1:1.1.1k-15.el8_10 1:1.1.1k-16.el8_10 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

libxml2 CVE-2024-34459 低危 2.9.7-21.el8_10.4 2.9.7-21.el8_10.5 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33

openssl CVE-2024-4741 低危 1:1.1.1k-15.el8_10 1:1.1.1k-16.el8_10 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02

libxml2 CVE-2025-6170 低危 2.9.7-21.el8_10.4 2.9.7-21.el8_10.6 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:a56088cf0173f5206ec6c09bfd0aebee0d62eedfaa08fb9dc38e7af584e3eb5e

发布日期: 2025-06-16 16:15 修改: 2026-08-25 10:18

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×