docker.io/odivlad/webvirtmgr:v0.0.1 linux/amd64

docker.io/odivlad/webvirtmgr:v0.0.1 - Trivy安全扫描结果 扫描时间: 2026-06-11 22:51
全部漏洞信息
低危漏洞:946 中危漏洞:1210 高危漏洞:185 严重漏洞:8

系统OS: centos 7.4.1708 扫描引擎: Trivy 扫描时间: 2026-06-11 22:51

docker.io/odivlad/webvirtmgr:v0.0.1 (centos 7.4.1708) (centos)
低危漏洞:945 中危漏洞:1201 高危漏洞:171 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
nss CVE-2021-43527 严重 3.28.4-8.el7 3.67.0-4.el7_9 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:29

nss-sysinit CVE-2021-43527 严重 3.28.4-8.el7 3.67.0-4.el7_9 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:29

nss-tools CVE-2021-43527 严重 3.28.4-8.el7 3.67.0-4.el7_9 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:29

bind-license CVE-2018-5743 高危 32:9.9.4-50.el7 32:9.9.4-74.el7_6.1 bind: Limiting simultaneous TCP clients is ineffective

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5743

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-09 16:15 修改: 2024-11-21 04:09

bind-license CVE-2020-8616 高危 32:9.9.4-50.el7 32:9.11.4-16.P2.el7_8.6 bind: BIND does not sufficiently limit the number of fetches performed when processing referrals

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8616

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-05-19 14:15 修改: 2024-11-21 05:39

bind-license CVE-2020-8617 高危 32:9.9.4-50.el7 32:9.11.4-16.P2.el7_8.6 bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8617

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-05-19 14:15 修改: 2024-11-21 05:39

bind-license CVE-2020-8625 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.4 bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8625

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-17 23:15 修改: 2024-11-21 05:39

bind-license CVE-2021-25215 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.5 bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25215

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-29 01:15 修改: 2024-11-21 05:54

bind-license CVE-2022-38177 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.10 bind: memory leak in ECDSA DNSSEC verification code

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38177

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-21 11:15 修改: 2025-05-28 16:15

bind-license CVE-2022-38178 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.10 bind: memory leaks in EdDSA DNSSEC verification code

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38178

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-21 11:15 修改: 2025-05-28 16:15

bind-license CVE-2023-2828 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.14 bind: named's configured cache size limit can be significantly exceeded

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2828

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-21 17:15 修改: 2024-11-21 07:59

bind-license CVE-2023-3341 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.15 bind: stack exhaustion in control channel code may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3341

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-20 13:15 修改: 2025-12-02 21:15

bind-license CVE-2023-4408 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.16 bind9: Parsing large DNS messages may cause excessive CPU load

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4408

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-13 14:15 修改: 2025-03-14 17:15

bind-license CVE-2023-50387 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.16 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-14 16:15 修改: 2025-11-04 19:16

bind-license CVE-2023-50868 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.16 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-14 16:15 修改: 2025-12-23 20:20

bind-license CVE-2024-11187 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.18 bind: bind9: Many records in the additional section cause CPU exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11187

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-29 22:15 修改: 2026-04-15 00:35

bind-license CVE-2024-1737 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.17 bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1737

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-23 15:15 修改: 2026-04-15 00:35

bind-license CVE-2024-1975 高危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.17 bind9: bind: SIG(0) can be used to exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1975

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-23 15:15 修改: 2026-04-15 00:35

bind-license CVE-2026-3039 高危 32:9.9.4-50.el7 bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3039

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

bind-license CVE-2026-5946 高危 32:9.9.4-50.el7 bind: BIND: Denial of Service via specially crafted DNS messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5946

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

cyrus-sasl CVE-2022-24407 高危 2.1.26-21.el7 2.1.26-24.el7_9 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-02-24 15:15 修改: 2024-11-21 06:50

cyrus-sasl-gssapi CVE-2022-24407 高危 2.1.26-21.el7 2.1.26-24.el7_9 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-02-24 15:15 修改: 2024-11-21 06:50

cyrus-sasl-lib CVE-2022-24407 高危 2.1.26-21.el7 2.1.26-24.el7_9 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-24 15:15 修改: 2024-11-21 06:50

dbus CVE-2020-12049 高危 1:1.6.12-17.el7 1:1.10.24-14.el7_8 dbus: denial of service via file descriptor leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-06-08 17:15 修改: 2024-11-21 04:59

dbus-libs CVE-2020-12049 高危 1:1.6.12-17.el7 1:1.10.24-14.el7_8 dbus: denial of service via file descriptor leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-06-08 17:15 修改: 2024-11-21 04:59

dracut CVE-2017-5715 高危 033-502.el7 033-502.el7_4.1 hw: cpu: speculative execution branch target injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5715

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-04 13:29 修改: 2025-05-06 15:15

dracut CVE-2026-6893 高危 033-502.el7 dracut: dracut: Root code execution via DHCP options command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6893

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-06-10 20:17 修改: 2026-06-10 20:22

expat CVE-2022-22822 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22823 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22824 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-25235 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-16 01:15 修改: 2025-05-05 17:18

expat CVE-2022-25236 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-16 01:15 修改: 2025-05-05 17:18

expat CVE-2022-25315 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-18 05:15 修改: 2025-05-05 17:18

expat CVE-2022-40674 高危 2.1.0-10.el7_3 2.1.0-15.el7_9 expat: a use-after-free in the doContent function in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-14 11:15 修改: 2025-05-30 20:15

expat CVE-2026-45186 高危 2.1.0-10.el7_3 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-10 07:16 修改: 2026-05-14 17:20

git CVE-2018-11235 高危 1.8.3.1-12.el7_4 1.8.3.1-14.el7_5 git: arbitrary code execution when recursively cloning a malicious repository

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11235

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-05-30 04:29 修改: 2024-11-21 03:42

git CVE-2018-17456 高危 1.8.3.1-12.el7_4 1.8.3.1-20.el7 git: arbitrary code execution via .gitmodules

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17456

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-10-06 14:29 修改: 2024-11-21 03:54

git CVE-2019-1387 高危 1.8.3.1-12.el7_4 1.8.3.1-21.el7_7 git: Remote code execution in recursive clones with nested submodules

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1387

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-12-18 21:15 修改: 2025-11-04 16:15

git CVE-2020-11008 高危 1.8.3.1-12.el7_4 1.8.3.1-23.el7_8 git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11008

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-04-21 19:15 修改: 2024-11-21 04:56

git CVE-2020-5260 高危 1.8.3.1-12.el7_4 1.8.3.1-22.el7_8 git: Crafted URL containing new lines can cause credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5260

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-04-14 23:15 修改: 2024-11-21 05:33

git CVE-2022-23521 高危 1.8.3.1-12.el7_4 1.8.3.1-24.el7_9 git: gitattributes parsing integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23521

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-01-17 23:15 修改: 2024-11-21 06:48

git CVE-2022-41903 高危 1.8.3.1-12.el7_4 1.8.3.1-24.el7_9 git: Heap overflow in `git archive`, `git log --format` leading to RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41903

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-01-17 23:15 修改: 2024-11-21 07:24

git CVE-2023-25652 高危 1.8.3.1-12.el7_4 1.8.3.1-25.el7_9 git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25652

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-25 20:15 修改: 2025-11-04 17:15

git CVE-2023-29007 高危 1.8.3.1-12.el7_4 1.8.3.1-25.el7_9 git: arbitrary configuration injection when renaming or deleting a section from a configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29007

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-25 21:15 修改: 2025-11-04 17:15

git CVE-2024-32002 高危 1.8.3.1-12.el7_4 git: Recursive clones RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 19:15 修改: 2025-11-04 17:15

git CVE-2025-48384 高危 1.8.3.1-12.el7_4 1.8.3.1-25.el7_9.1 git: Git arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48384

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-08 19:15 修改: 2025-11-06 14:52

glib2 CVE-2021-27219 高危 2.50.3-3.el7 2.56.1-9.el7_9 glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27219

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:57

glibc CVE-2024-2961 高危 2.17-196.el7 2.17-326.el7_9.3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-04-17 18:15 修改: 2026-05-12 12:16

glibc CVE-2024-33599 高危 2.17-196.el7 2.17-326.el7_9.3 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc-common CVE-2024-2961 高危 2.17-196.el7 2.17-326.el7_9.3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-04-17 18:15 修改: 2026-05-12 12:16

glibc-common CVE-2024-33599 高危 2.17-196.el7 2.17-326.el7_9.3 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

gnupg2 CVE-2018-12020 高危 2.0.22-4.el7 2.0.22-5.el7_5 gnupg2: Improper sanitization of filenames allows for the display of fake status messages and the bypass of signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12020

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-08 21:29 修改: 2024-11-21 03:44

gnupg2 CVE-2025-68973 高危 2.0.22-4.el7 2.0.22-5.el7_9.1 GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-28 17:16 修改: 2026-01-14 19:16

gnutls CVE-2014-3566 高危 3.3.26-9.el7 SSL/TLS: Padding Oracle On Downgraded Legacy Encryption attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3566

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2014-10-15 00:55 修改: 2026-05-28 18:16

gnutls CVE-2026-33845 高危 3.3.26-9.el7 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-30 18:16 修改: 2026-06-02 16:16

gnutls CVE-2026-33846 高危 3.3.26-9.el7 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-04 10:15 修改: 2026-06-02 16:16

gnutls CVE-2026-42009 高危 3.3.26-9.el7 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-18 13:16 修改: 2026-06-08 17:16

gnutls CVE-2026-42010 高危 3.3.26-9.el7 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-07 12:16 修改: 2026-06-10 16:17

gzip CVE-2022-1271 高危 1.5-9.el7 1.5-11.el7_9 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15

krb5-libs CVE-2022-42898 高危 1.15.1-8.el7 1.15.1-55.el7_9 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-12-25 06:15 修改: 2025-04-14 19:15

krb5-libs CVE-2024-3596 高危 1.15.1-8.el7 1.15.1-55.el7_9.3 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-09 12:15 修改: 2026-05-12 12:16

less CVE-2024-32487 高危 458-9.el7 458-10.el7_9 less: OS command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32487

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-04-13 15:15 修改: 2025-06-17 20:58

libcap CVE-2026-4878 高危 2.22-9.el7 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-09 16:16 修改: 2026-06-11 10:16

libssh2 CVE-2019-3855 高危 1.4.3-10.el7_2.1 1.4.3-12.el7_6.2 libssh2: Integer overflow in transport read resulting in out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3855

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-21 21:29 修改: 2024-11-21 04:42

libssh2 CVE-2019-3856 高危 1.4.3-10.el7_2.1 1.4.3-12.el7_6.2 libssh2: Integer overflow in keyboard interactive handling resulting in out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3856

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-25 19:29 修改: 2024-11-21 04:42

libssh2 CVE-2019-3857 高危 1.4.3-10.el7_2.1 1.4.3-12.el7_6.2 libssh2: Integer overflow in SSH packet processing channel resulting in out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3857

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-25 19:29 修改: 2024-11-21 04:42

libssh2 CVE-2019-3863 高危 1.4.3-10.el7_2.1 1.4.3-12.el7_6.2 libssh2: Integer overflow in user authenticate keyboard interactive allows out-of-bounds writes

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3863

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-25 18:29 修改: 2025-12-19 04:15

libssh2 CVE-2026-7598 高危 1.4.3-10.el7_2.1 libssh2: integer overflow via large username or password arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7598

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-01 22:16 修改: 2026-05-07 01:47

libvirt-libs CVE-2017-5715 高危 3.2.0-14.el7_4.7 3.9.0-14.el7 hw: cpu: speculative execution branch target injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5715

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-01-04 13:29 修改: 2025-05-06 15:15

libvirt-libs CVE-2018-12130 高危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.9 hardware: Microarchitectural Fill Buffer Data Sampling (MFBDS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12130

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-05-30 16:29 修改: 2026-05-29 21:16

libvirt-libs CVE-2018-3639 高危 3.2.0-14.el7_4.7 3.9.0-14.el7_5.6 hw: cpu: speculative store bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-3639

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-05-22 12:29 修改: 2026-05-29 21:16

libvirt-libs CVE-2019-10132 高危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.10 libvirt: wrong permissions in systemd admin-sock due to missing SocketMode parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10132

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-05-22 18:29 修改: 2024-11-21 04:18

libvirt-libs CVE-2019-10161 高危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.12 libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10161

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-07-30 23:15 修改: 2024-11-21 04:18

libvirt-libs CVE-2019-10166 高危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.12 libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10166

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-08-02 13:15 修改: 2024-11-21 04:18

libvirt-libs CVE-2019-10167 高危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.12 libvirt: arbitrary command execution via virConnectGetDomainCapabilities API

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10167

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-08-02 13:15 修改: 2024-11-21 04:18

libvirt-libs CVE-2019-10168 高危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.12 libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10168

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-08-02 13:15 修改: 2024-11-21 04:18

libxml2 CVE-2024-56171 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Use-After-Free in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56171

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-18 22:15 修改: 2025-11-03 21:17

libxml2 CVE-2025-24928 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24928

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

libxml2 CVE-2025-49794 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Heap use after free (UAF) leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49794

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2 CVE-2025-49796 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Type confusion leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49796

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2 CVE-2025-7425 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.12 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-10 14:15 修改: 2026-05-12 13:17

libxml2-python CVE-2024-56171 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Use-After-Free in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56171

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-18 22:15 修改: 2025-11-03 21:17

libxml2-python CVE-2025-24928 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24928

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

libxml2-python CVE-2025-49794 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Heap use after free (UAF) leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49794

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2-python CVE-2025-49796 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Type confusion leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49796

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2-python CVE-2025-7425 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.12 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-10 14:15 修改: 2026-05-12 13:17

nettle CVE-2021-20305 高危 2.7.1-8.el7 2.7.1-9.el7_9 nettle: Out of bounds memory access in signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20305

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-04-05 22:15 修改: 2024-11-21 05:46

bind-license CVE-2017-3143 高危 32:9.9.4-50.el7 32:9.9.4-50.el7_3.1 bind: An error in TSIG authentication can permit unauthorized dynamic updates

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3143

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-16 20:29 修改: 2024-11-21 03:24

nss CVE-2017-7805 高危 3.28.4-8.el7 3.28.4-12.el7_4 nss: Potential use-after-free in TLS 1.2 server when verifying client authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7805

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:32

nss CVE-2019-11745 高危 3.28.4-8.el7 3.44.0-7.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss CVE-2023-0767 高危 3.28.4-8.el7 3.79.0-5.el7_9 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-02 17:15 修改: 2025-05-05 16:15

nss-softokn CVE-2019-11745 高危 3.28.3-6.el7 3.44.0-8.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-softokn-freebl CVE-2019-11745 高危 3.28.3-6.el7 3.44.0-8.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

bind-license CVE-2017-3145 高危 32:9.9.4-50.el7 32:9.9.4-51.el7_4.2 bind: Improper fetch cleanup sequencing in the resolver can cause named to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3145

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-16 20:29 修改: 2024-11-21 03:24

nss-sysinit CVE-2017-7805 高危 3.28.4-8.el7 3.28.4-12.el7_4 nss: Potential use-after-free in TLS 1.2 server when verifying client authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7805

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:32

nss-sysinit CVE-2019-11745 高危 3.28.4-8.el7 3.44.0-7.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-sysinit CVE-2023-0767 高危 3.28.4-8.el7 3.79.0-5.el7_9 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-02 17:15 修改: 2025-05-05 16:15

bind-license CVE-2018-5740 高危 32:9.9.4-50.el7 32:9.9.4-61.el7_5.1 bind: processing of certain records when "deny-answer-aliases" is in use may trigger an assert leading to a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5740

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-16 20:29 修改: 2024-11-21 04:09

nss-tools CVE-2017-7805 高危 3.28.4-8.el7 3.28.4-12.el7_4 nss: Potential use-after-free in TLS 1.2 server when verifying client authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7805

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:32

nss-tools CVE-2019-11745 高危 3.28.4-8.el7 3.44.0-7.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-tools CVE-2023-0767 高危 3.28.4-8.el7 3.79.0-5.el7_9 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-02 17:15 修改: 2025-05-05 16:15

nss-util CVE-2019-11745 高危 3.28.4-3.el7 3.44.0-4.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

openssh CVE-2023-38408 高危 7.4p1-13.el7_4 7.4p1-23.el7_9 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-07-20 03:15 修改: 2024-11-21 08:13

openssh CVE-2026-35385 高危 7.4p1-13.el7_4 7.4p1-23.el7_9.2 OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35385

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:02

openssh-clients CVE-2023-38408 高危 7.4p1-13.el7_4 7.4p1-23.el7_9 openssh: Remote code execution in ssh-agent PKCS#11 support

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38408

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-07-20 03:15 修改: 2024-11-21 08:13

openssh-clients CVE-2026-35385 高危 7.4p1-13.el7_4 7.4p1-23.el7_9.2 OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35385

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:02

openssl-libs CVE-2020-1971 高危 1:1.0.2k-8.el7 1:1.0.2k-21.el7_9 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-08 16:15 修改: 2026-05-29 16:16

openssl-libs CVE-2022-0778 高危 1:1.0.2k-8.el7 1:1.0.2k-25.el7_9 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-15 17:15 修改: 2026-04-14 10:16

openssl-libs CVE-2023-0286 高危 1:1.0.2k-8.el7 1:1.0.2k-26.el7_9 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-08 20:15 修改: 2025-11-04 20:16

openssl-libs CVE-2026-45447 高危 1:1.0.2k-8.el7 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-06-09 17:17 修改: 2026-06-10 15:16

pam CVE-2025-6020 高危 1.1.8-18.el7 1.1.8-23.el7_9.1 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-17 13:15 修改: 2026-05-12 13:17

pam CVE-2025-8941 高危 1.1.8-18.el7 1.1.8-23.el7_9.2 linux-pam: Incomplete fix for CVE-2025-6020

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8941

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-08-13 15:15 修改: 2026-04-15 00:35

perl CVE-2018-18311 高危 4:5.16.3-292.el7 4:5.16.3-294.el7_6 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18311

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-12-07 21:29 修改: 2024-11-21 03:55

perl CVE-2024-56406 高危 4:5.16.3-292.el7 perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56406

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-04-13 14:15 修改: 2025-10-16 14:15

perl-Git CVE-2018-11235 高危 1.8.3.1-12.el7_4 1.8.3.1-14.el7_5 git: arbitrary code execution when recursively cloning a malicious repository

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11235

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-05-30 04:29 修改: 2024-11-21 03:42

perl-Git CVE-2018-17456 高危 1.8.3.1-12.el7_4 1.8.3.1-20.el7 git: arbitrary code execution via .gitmodules

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17456

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-10-06 14:29 修改: 2024-11-21 03:54

perl-Git CVE-2019-1387 高危 1.8.3.1-12.el7_4 1.8.3.1-21.el7_7 git: Remote code execution in recursive clones with nested submodules

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1387

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-12-18 21:15 修改: 2025-11-04 16:15

perl-Git CVE-2020-11008 高危 1.8.3.1-12.el7_4 1.8.3.1-23.el7_8 git: Crafted URL containing new lines, empty host or lacks a scheme can cause credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11008

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-04-21 19:15 修改: 2024-11-21 04:56

perl-Git CVE-2020-5260 高危 1.8.3.1-12.el7_4 1.8.3.1-22.el7_8 git: Crafted URL containing new lines can cause credential leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-5260

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-04-14 23:15 修改: 2024-11-21 05:33

perl-Git CVE-2022-23521 高危 1.8.3.1-12.el7_4 1.8.3.1-24.el7_9 git: gitattributes parsing integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23521

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-01-17 23:15 修改: 2024-11-21 06:48

perl-Git CVE-2022-41903 高危 1.8.3.1-12.el7_4 1.8.3.1-24.el7_9 git: Heap overflow in `git archive`, `git log --format` leading to RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41903

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-01-17 23:15 修改: 2024-11-21 07:24

perl-Git CVE-2023-25652 高危 1.8.3.1-12.el7_4 1.8.3.1-25.el7_9 git: by feeding specially crafted input to `git apply --reject`, a path outside the working tree can be overwritten with partially controlled contents

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25652

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-25 20:15 修改: 2025-11-04 17:15

perl-Git CVE-2023-29007 高危 1.8.3.1-12.el7_4 1.8.3.1-25.el7_9 git: arbitrary configuration injection when renaming or deleting a section from a configuration file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29007

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-25 21:15 修改: 2025-11-04 17:15

perl-Git CVE-2024-32002 高危 1.8.3.1-12.el7_4 git: Recursive clones RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32002

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 19:15 修改: 2025-11-04 17:15

perl-Git CVE-2025-48384 高危 1.8.3.1-12.el7_4 1.8.3.1-25.el7_9.1 git: Git arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48384

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-08 19:15 修改: 2025-11-06 14:52

perl-Pod-Escapes CVE-2018-18311 高危 1:1.04-292.el7 1:1.04-294.el7_6 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18311

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-12-07 21:29 修改: 2024-11-21 03:55

perl-Pod-Escapes CVE-2024-56406 高危 1:1.04-292.el7 perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56406

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-04-13 14:15 修改: 2025-10-16 14:15

perl-libs CVE-2018-18311 高危 4:5.16.3-292.el7 4:5.16.3-294.el7_6 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18311

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-12-07 21:29 修改: 2024-11-21 03:55

perl-libs CVE-2024-56406 高危 4:5.16.3-292.el7 perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56406

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-04-13 14:15 修改: 2025-10-16 14:15

perl-macros CVE-2018-18311 高危 4:5.16.3-292.el7 4:5.16.3-294.el7_6 perl: Integer overflow leading to buffer overflow in Perl_my_setenv()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18311

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-12-07 21:29 修改: 2024-11-21 03:55

perl-macros CVE-2024-56406 高危 4:5.16.3-292.el7 perl: Perl 5.34, 5.36, 5.38 and 5.40 are vulnerable to a heap buffer overflow when transliterating non-ASCII bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56406

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-04-13 14:15 修改: 2025-10-16 14:15

procps-ng CVE-2018-1124 高危 3.3.10-16.el7 3.3.10-17.el7_5.2 procps: Integer overflows leading to heap overflow in file2strvec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1124

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-23 13:29 修改: 2024-11-21 03:59

python CVE-2019-10160 高危 2.7.5-58.el7 2.7.5-80.el7_6 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10160

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-07 18:29 修改: 2024-11-21 04:18

python CVE-2019-9636 高危 2.7.5-58.el7 2.7.5-77.el7_6 python: Information Disclosure due to urlsplit improper NFKC normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9636

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-08 21:29 修改: 2024-11-21 04:52

python CVE-2023-24329 高危 2.7.5-58.el7 2.7.5-93.el7_9 python: urllib.parse url blocklisting bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-17 15:15 修改: 2025-11-03 22:16

python CVE-2023-40217 高危 2.7.5-58.el7 2.7.5-94.el7_9 python: TLS handshake bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-25 01:15 修改: 2025-11-03 22:16

python CVE-2026-4519 高危 2.7.5-58.el7 2.7.5-94.el7_9.4 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-20 15:16 修改: 2026-04-16 14:53

python CVE-2026-4786 高危 2.7.5-58.el7 2.7.5-94.el7_9.5 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-13 22:16 修改: 2026-04-29 16:16

python CVE-2026-6100 高危 2.7.5-58.el7 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-13 18:16 修改: 2026-04-17 15:18

python-libs CVE-2019-10160 高危 2.7.5-58.el7 2.7.5-80.el7_6 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10160

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-07 18:29 修改: 2024-11-21 04:18

python-libs CVE-2019-9636 高危 2.7.5-58.el7 2.7.5-77.el7_6 python: Information Disclosure due to urlsplit improper NFKC normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9636

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-08 21:29 修改: 2024-11-21 04:52

python-libs CVE-2023-24329 高危 2.7.5-58.el7 2.7.5-93.el7_9 python: urllib.parse url blocklisting bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-17 15:15 修改: 2025-11-03 22:16

python-libs CVE-2023-40217 高危 2.7.5-58.el7 2.7.5-94.el7_9 python: TLS handshake bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-25 01:15 修改: 2025-11-03 22:16

python-libs CVE-2026-4519 高危 2.7.5-58.el7 2.7.5-94.el7_9.4 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-20 15:16 修改: 2026-04-16 14:53

python-libs CVE-2026-4786 高危 2.7.5-58.el7 2.7.5-94.el7_9.5 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-13 22:16 修改: 2026-04-29 16:16

python-libs CVE-2026-6100 高危 2.7.5-58.el7 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-13 18:16 修改: 2026-04-17 15:18

python-setuptools CVE-2024-6345 高危 0.9.8-7.el7 0.9.8-7.el7_9.1 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-07-15 01:15 修改: 2026-04-15 00:35

qemu-guest-agent CVE-2016-1568 高危 10:2.8.0-2.el7 Qemu: ide: ahci use-after-free vulnerability in aio port commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1568

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-04-12 02:00 修改: 2026-05-06 22:30

rsync CVE-2022-29154 高危 3.0.9-18.el7 3.1.2-11.el7_9 rsync: remote arbitrary files write inside the directories of connecting peers

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29154

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-08-02 15:15 修改: 2024-11-21 06:58

rsync CVE-2024-12085 高危 3.0.9-18.el7 3.1.2-12.el7_9.1 rsync: Info Leak via Uninitialized Stack Contents

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12085

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 18:15 修改: 2026-04-14 22:16

rsync CVE-2026-29518 高危 3.0.9-18.el7 rsync: TOCTOU symlink race condition allowing local privilege escalation in daemon mode without chroot.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29518

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-20 13:16 修改: 2026-05-26 16:16

rsync CVE-2026-41035 高危 3.0.9-18.el7 3.1.2-12.el7_9.3 rsync: Rsync: Use-after-free vulnerability in extended attribute handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41035

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-16 07:16 修改: 2026-05-21 19:23

rsync CVE-2026-43618 高危 3.0.9-18.el7 rsync: rsync: Remote memory disclosure via integer overflow in compressed-token decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43618

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-20 02:16 修改: 2026-05-21 20:34

sqlite CVE-2019-13734 高危 3.7.17-8.el7 3.7.17-8.el7_7.1 sqlite: fts3: improve shadow table corruption detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13734

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2025-6965 高危 3.7.17-8.el7 3.7.17-9.el7_9.1 sqlite: Integer Truncation in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-15 14:15 修改: 2026-04-14 10:16

systemd CVE-2018-15688 高危 219-42.el7 219-62.el7_6.2 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd CVE-2018-16864 高危 219-42.el7 219-62.el7_6.2 systemd: stack overflow when calling syslog from a command with long cmdline

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-11 20:29 修改: 2024-11-21 03:53

systemd CVE-2018-16865 高危 219-42.el7 219-62.el7_6.2 systemd: stack overflow when receiving many journald entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-11 21:29 修改: 2024-11-21 03:53

systemd CVE-2019-6454 高危 219-42.el7 219-62.el7_6.5 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-21 16:01 修改: 2024-11-21 04:46

systemd CVE-2022-2526 高危 219-42.el7 219-78.el7_9.7 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-09 15:15 修改: 2024-11-21 07:01

systemd-libs CVE-2018-15688 高危 219-42.el7 219-62.el7_6.2 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd-libs CVE-2018-16864 高危 219-42.el7 219-62.el7_6.2 systemd: stack overflow when calling syslog from a command with long cmdline

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-11 20:29 修改: 2024-11-21 03:53

systemd-libs CVE-2018-16865 高危 219-42.el7 219-62.el7_6.2 systemd: stack overflow when receiving many journald entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-11 21:29 修改: 2024-11-21 03:53

systemd-libs CVE-2019-6454 高危 219-42.el7 219-62.el7_6.5 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-21 16:01 修改: 2024-11-21 04:46

systemd-libs CVE-2022-2526 高危 219-42.el7 219-78.el7_9.7 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-09 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2019-12735 高危 2:7.4.160-2.el7 2:7.4.160-6.el7_6 vim/neovim: ': source!' command allows arbitrary command execution via modelines

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12735

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-05 14:29 修改: 2025-11-11 17:15

vim-minimal CVE-2026-33412 高危 2:7.4.160-2.el7 2:7.4.629-8.el7_9.1 vim: Vim: Arbitrary code execution via command injection in glob() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33412

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-24 20:16 修改: 2026-03-25 21:59

vim-minimal CVE-2026-34982 高危 2:7.4.160-2.el7 vim: arbitrary command execution via modeline sandbox bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34982

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-06 16:16 修改: 2026-04-22 20:10

xz CVE-2022-1271 高危 5.2.2-1.el7 5.2.2-2.el7_9 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15

xz-libs CVE-2022-1271 高危 5.2.2-1.el7 5.2.2-2.el7_9 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15

yum-plugin-fastestmirror CVE-2018-10897 高危 1.1.31-42.el7 1.1.31-46.el7_5 yum-utils: reposync: improper path validation may lead to directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10897

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 17:29 修改: 2024-11-21 03:42

yum-plugin-ovl CVE-2018-10897 高危 1.1.31-42.el7 1.1.31-46.el7_5 yum-utils: reposync: improper path validation may lead to directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10897

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 17:29 修改: 2024-11-21 03:42

yum-utils CVE-2018-10897 高危 1.1.31-42.el7 1.1.31-46.el7_5 yum-utils: reposync: improper path validation may lead to directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10897

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 17:29 修改: 2024-11-21 03:42

zlib CVE-2018-25032 高危 1.2.7-17.el7 1.2.7-20.el7_9 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-25 09:15 修改: 2025-08-21 20:37

expat CVE-2012-6702 中危 2.1.0-10.el7_3 expat: Using XML_Parse before rand() results into non-random output

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-6702

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

expat CVE-2013-0340 中危 2.1.0-10.el7_3 expat: internal entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0340

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-01-21 18:55 修改: 2026-04-29 01:13

expat CVE-2015-2716 中危 2.1.0-10.el7_3 2.1.0-11.el7 expat: Integer overflow leading to buffer overflow in XML_GetBuffer()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2716

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-05-14 10:59 修改: 2026-05-06 22:30

expat CVE-2016-4472 中危 2.1.0-10.el7_3 expat: Undefined behavior and pointer overflows

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4472

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-30 17:59 修改: 2026-05-06 22:30

expat CVE-2016-5300 中危 2.1.0-10.el7_3 expat: Little entropy used for hash initialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5300

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

expat CVE-2017-9233 中危 2.1.0-10.el7_3 expat: Inifinite loop due to invalid XML in external entity

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9233

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-25 20:29 修改: 2025-04-20 01:37

expat CVE-2018-20843 中危 2.1.0-10.el7_3 2.1.0-12.el7 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20843

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-24 17:15 修改: 2025-05-30 20:15

expat CVE-2021-45960 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-01 19:15 修改: 2025-05-05 17:17

expat CVE-2021-46143 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-06 04:15 修改: 2025-05-05 17:17

expat CVE-2022-22825 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22826 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22827 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-23852 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-24 02:15 修改: 2025-05-05 17:17

expat CVE-2022-23990 中危 2.1.0-10.el7_3 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-26 19:15 修改: 2025-05-05 17:17

expat CVE-2022-25313 中危 2.1.0-10.el7_3 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-18 05:15 修改: 2025-05-30 20:15

expat CVE-2022-43680 中危 2.1.0-10.el7_3 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-24 14:15 修改: 2025-05-30 20:15

expat CVE-2023-52425 中危 2.1.0-10.el7_3 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-04 20:15 修改: 2025-11-04 19:16

expat CVE-2023-52426 中危 2.1.0-10.el7_3 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-04 20:15 修改: 2025-11-04 19:16

expat CVE-2024-45490 中危 2.1.0-10.el7_3 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-30 03:15 修改: 2026-05-12 12:17

expat CVE-2024-45491 中危 2.1.0-10.el7_3 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-30 03:15 修改: 2026-05-12 12:17

expat CVE-2024-45492 中危 2.1.0-10.el7_3 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-30 03:15 修改: 2026-05-12 12:17

expat CVE-2024-50602 中危 2.1.0-10.el7_3 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-10-27 05:15 修改: 2025-10-15 17:54

expat CVE-2024-8176 中危 2.1.0-10.el7_3 libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8176

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-03-14 09:15 修改: 2026-04-15 00:35

expat CVE-2026-32776 中危 2.1.0-10.el7_3 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-16 14:19 修改: 2026-03-17 15:52

expat CVE-2026-32777 中危 2.1.0-10.el7_3 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-16 14:19 修改: 2026-03-17 15:52

expat CVE-2026-32778 中危 2.1.0-10.el7_3 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-16 14:19 修改: 2026-03-17 15:52

expat CVE-2026-50219 中危 2.1.0-10.el7_3 expat: libexpat: Use-after-free vulnerability due to improper handler call depth tracking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-50219

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-06-04 06:16 修改: 2026-06-04 18:39

bash CVE-2019-9924 中危 4.2.46-28.el7 4.2.46-34.el7 bash: BASH_CMD is writable in restricted bash shells

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9924

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-22 08:29 修改: 2024-11-21 04:52

audit-libs CVE-2015-5186 中危 2.7.6-3.el7 Audit: log terminal emulator escape sequences handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5186

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-06 21:29 修改: 2026-05-13 00:24

avahi-libs CVE-2021-3468 中危 0.6.31-17.el7 avahi: Local DoS by event-busy-loop from writing long lines to /run/avahi-daemon/socket

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3468

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-06-02 16:15 修改: 2024-11-21 06:21

bind-license CVE-2017-3142 中危 32:9.9.4-50.el7 32:9.9.4-50.el7_3.1 bind: An error in TSIG authentication can permit unauthorized zone transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3142

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-16 20:29 修改: 2024-11-21 03:24

bind-license CVE-2018-5741 中危 32:9.9.4-50.el7 32:9.11.4-9.P2.el7 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5741

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-16 20:29 修改: 2024-11-21 04:09

bind-license CVE-2018-5742 中危 32:9.9.4-50.el7 32:9.9.4-73.el7_6 bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5742

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-30 14:15 修改: 2024-11-21 04:09

bind-license CVE-2019-6477 中危 32:9.9.4-50.el7 32:9.11.4-16.P2.el7 bind: TCP Pipelining doesn't limit TCP clients on a single connection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6477

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-26 16:15 修改: 2024-11-21 04:46

bind-license CVE-2020-8622 中危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.2 bind: truncated TSIG response can lead to an assertion failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8622

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-08-21 21:15 修改: 2024-11-21 05:39

bind-license CVE-2020-8623 中危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.2 bind: remotely triggerable assertion failure in pk11.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8623

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-08-21 21:15 修改: 2024-11-21 05:39

bind-license CVE-2020-8624 中危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.2 bind: incorrect enforcement of update-policy rules of type "subdomain"

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8624

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-08-21 21:15 修改: 2024-11-21 05:39

bind-license CVE-2021-25214 中危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.7 bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25214

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-29 01:15 修改: 2024-11-21 05:54

git CVE-2017-14867 中危 1.8.3.1-12.el7_4 git: cvsserver command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14867

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-09-29 01:34 修改: 2026-05-13 00:24

git CVE-2018-1000021 中危 1.8.3.1-12.el7_4 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-02-09 23:29 修改: 2024-11-21 03:39

git CVE-2019-1348 中危 1.8.3.1-12.el7_4 git: Arbitrary path overwriting via export-marks in-stream command feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1348

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-01-24 22:15 修改: 2024-11-21 04:36

git CVE-2019-1349 中危 1.8.3.1-12.el7_4 git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1349

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-01-24 21:15 修改: 2024-11-21 04:36

git CVE-2021-21300 中危 1.8.3.1-12.el7_4 git: remote code execution during clone operation on case-insensitive filesystems

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21300

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-03-09 20:15 修改: 2024-11-21 05:47

git CVE-2021-40330 中危 1.8.3.1-12.el7_4 git: unexpected cross-protocol requests via a repository path containing a newline character

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40330

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-08-31 04:15 修改: 2024-11-21 06:23

git CVE-2022-24765 中危 1.8.3.1-12.el7_4 git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24765

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-04-12 18:15 修改: 2024-11-21 06:51

git CVE-2022-39253 中危 1.8.3.1-12.el7_4 git: exposure of sensitive information to a malicious actor

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39253

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-10-19 11:15 修改: 2024-11-21 07:17

git CVE-2022-39260 中危 1.8.3.1-12.el7_4 git: git shell function that splits command arguments can lead to arbitrary heap writes.

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39260

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-10-19 12:15 修改: 2024-11-21 07:17

git CVE-2023-22490 中危 1.8.3.1-12.el7_4 git: data exfiltration with maliciously crafted repository

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22490

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-02-14 20:15 修改: 2024-11-21 07:44

git CVE-2023-23946 中危 1.8.3.1-12.el7_4 git: git apply: a path outside the working tree can be overwritten with crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23946

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-02-14 20:15 修改: 2024-11-21 07:47

git CVE-2024-32465 中危 1.8.3.1-12.el7_4 git: additional local RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 20:15 修改: 2026-01-05 19:15

git CVE-2024-52005 中危 1.8.3.1-12.el7_4 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-15 18:15 修改: 2025-12-18 16:00

git CVE-2025-27613 中危 1.8.3.1-12.el7_4 gitk: Git file creation flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27613

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 15:15 修改: 2026-04-15 00:35

git CVE-2025-27614 中危 1.8.3.1-12.el7_4 gitk: git script execution flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27614

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 15:15 修改: 2026-04-15 00:35

git CVE-2025-48386 中危 1.8.3.1-12.el7_4 git: Git buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48386

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-08 19:15 修改: 2026-04-15 00:35

bind-license CVE-2021-25219 中危 32:9.9.4-50.el7 bind: Lame cache can be abused to severely degrade resolver performance

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25219

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-10-27 21:15 修改: 2024-11-21 05:54

glib2 CVE-2015-2327 中危 2.50.3-3.el7 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2327

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2015-2328 中危 2.50.3-3.el7 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2328

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2015-3217 中危 2.50.3-3.el7 pcre: stack overflow caused by mishandled group empty match (8.38/11)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3217

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-13 16:59 修改: 2026-05-06 22:30

glib2 CVE-2015-5073 中危 2.50.3-3.el7 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5073

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-13 16:59 修改: 2026-05-06 22:30

glib2 CVE-2015-8388 中危 2.50.3-3.el7 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8388

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2015-8391 中危 2.50.3-3.el7 pcre: inefficient posix character class syntax check (8.38/16)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8391

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2015-9381 中危 2.50.3-3.el7 2.56.1-2.el7 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9381

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-03 05:15 修改: 2024-11-21 02:40

glib2 CVE-2015-9382 中危 2.50.3-3.el7 2.56.1-2.el7 freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9382

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-03 05:15 修改: 2024-11-21 02:40

glib2 CVE-2017-2862 中危 2.50.3-3.el7 2.56.1-2.el7 gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2862

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-05 18:29 修改: 2026-05-13 00:24

glib2 CVE-2018-11712 中危 2.50.3-3.el7 2.56.1-2.el7 webkitgtk: Improper TLS certificate verification for WebSocket connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11712

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-04 14:29 修改: 2024-11-21 03:43

glib2 CVE-2018-11713 中危 2.50.3-3.el7 2.56.1-2.el7 webkitgtk: WebSockets don't use system proxy settings

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11713

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-04 14:29 修改: 2024-11-21 03:43

glib2 CVE-2018-12910 中危 2.50.3-3.el7 2.56.1-2.el7 libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12910

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-05 18:29 修改: 2024-11-21 03:46

glib2 CVE-2018-14036 中危 2.50.3-3.el7 2.56.1-2.el7 accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14036

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-13 12:29 修改: 2024-11-21 03:48

glib2 CVE-2018-4121 中危 2.50.3-3.el7 2.56.1-2.el7 webkitgtk: memory corruption processing maliciously crafted web content

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4121

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-03 06:29 修改: 2024-11-21 04:06

glib2 CVE-2018-4200 中危 2.50.3-3.el7 2.56.1-2.el7 webkitgtk: memory corruption processing maliciously crafted web content

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4200

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-08 18:29 修改: 2024-11-21 04:06

glib2 CVE-2018-4204 中危 2.50.3-3.el7 2.56.1-2.el7 webkitgtk: memory corruption processing maliciously crafted web content

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4204

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-08 18:29 修改: 2024-11-21 04:06

glib2 CVE-2019-12450 中危 2.50.3-3.el7 2.56.1-7.el7 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12450

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-29 17:29 修改: 2024-11-21 04:22

glib2 CVE-2019-14822 中危 2.50.3-3.el7 2.56.1-7.el7 ibus: missing authorization allows local attacker to access the input bus of another user

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14822

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-25 12:15 修改: 2024-11-21 04:27

glib2 CVE-2021-27218 中危 2.50.3-3.el7 glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:57

glib2 CVE-2021-3800 中危 2.50.3-3.el7 glib2: Possible privilege escalation thourgh pkexec and aliases

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3800

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-23 16:15 修改: 2024-11-21 06:22

glib2 CVE-2024-34397 中危 2.50.3-3.el7 glib2: Signal subscription vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34397

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-07 18:15 修改: 2026-05-12 12:16

glib2 CVE-2024-52533 中危 2.50.3-3.el7 glib: buffer overflow in set_connect_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52533

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-11-11 23:15 修改: 2025-06-17 01:23

glib2 CVE-2025-13601 中危 2.50.3-3.el7 2.56.1-11.el7_9 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-11-26 15:15 修改: 2026-06-02 14:16

glib2 CVE-2025-14087 中危 2.50.3-3.el7 2.56.1-12.el7_9 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-10 09:15 修改: 2026-06-10 18:16

glib2 CVE-2025-14512 中危 2.50.3-3.el7 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-11 07:16 修改: 2026-06-10 18:16

glib2 CVE-2025-4373 中危 2.50.3-3.el7 glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4373

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-06 15:16 修改: 2026-05-12 13:17

glib2 CVE-2026-1484 中危 2.50.3-3.el7 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 14:15 修改: 2026-06-02 14:16

glib2 CVE-2026-1489 中危 2.50.3-3.el7 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 15:15 修改: 2026-06-02 14:16

bind-license CVE-2021-25220 中危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.13 bind: DNS forwarders - cache poisoning vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25220

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-23 13:15 修改: 2024-11-21 05:54

bind-license CVE-2022-2795 中危 32:9.9.4-50.el7 32:9.11.4-26.P2.el7_9.13 bind: processing large delegations may severely degrade resolver performance

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2795

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-21 11:15 修改: 2024-11-29 12:15

glibc CVE-2009-5155 中危 2.17-196.el7 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

漏洞详情: https://avd.aquasec.com/nvd/cve-2009-5155

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-26 02:29 修改: 2024-11-21 01:11

glibc CVE-2015-8983 中危 2.17-196.el7 glibc: _IO_wstr_overflow integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8983

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc CVE-2016-10739 中危 2.17-196.el7 2.17-292.el7 glibc: getaddrinfo should reject IP addresses with trailing characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10739

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-21 19:29 修改: 2024-11-21 02:44

glibc CVE-2016-1234 中危 2.17-196.el7 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1234

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-01 20:59 修改: 2026-05-06 22:30

glibc CVE-2016-4429 中危 2.17-196.el7 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4429

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-10 15:59 修改: 2026-05-06 22:30

glibc CVE-2017-15670 中危 2.17-196.el7 2.17-222.el7 glibc: Buffer overflow in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15670

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-20 17:29 修改: 2025-04-20 01:37

glibc CVE-2017-15804 中危 2.17-196.el7 2.17-222.el7 glibc: Buffer overflow during unescaping of user names with the ~ operator

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15804

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-22 20:29 修改: 2025-04-20 01:37

glibc CVE-2017-16997 中危 2.17-196.el7 2.17-260.el7 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16997

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-18 01:29 修改: 2025-04-20 01:37

glibc CVE-2017-8804 中危 2.17-196.el7 glibc: memory leak in sunrpc when decoding malformed XDR

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8804

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-07 18:29 修改: 2026-05-13 00:24

glibc CVE-2018-1000001 中危 2.17-196.el7 2.17-222.el7 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000001

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-31 14:29 修改: 2024-11-21 03:39

glibc CVE-2018-11236 中危 2.17-196.el7 2.17-260.el7 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-18 16:29 修改: 2024-11-21 03:42

glibc CVE-2018-11237 中危 2.17-196.el7 2.17-260.el7 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-18 16:29 修改: 2024-11-21 03:42

glibc CVE-2018-6485 中危 2.17-196.el7 2.17-260.el7 glibc: Integer overflow in posix_memalign in memalign functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6485

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-01 14:29 修改: 2024-11-21 04:10

glibc CVE-2019-25013 中危 2.17-196.el7 2.17-322.el7_9 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-04 18:15 修改: 2025-06-09 16:15

glibc CVE-2019-9169 中危 2.17-196.el7 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:51

glibc CVE-2020-10029 中危 2.17-196.el7 2.17-322.el7_9 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-03-04 15:15 修改: 2024-11-21 04:54

glibc CVE-2020-1752 中危 2.17-196.el7 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-04-30 17:15 修改: 2024-11-21 05:11

glibc CVE-2020-29573 中危 2.17-196.el7 2.17-322.el7_9 glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29573

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-06 00:15 修改: 2024-11-21 05:24

glibc CVE-2021-35942 中危 2.17-196.el7 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-22 18:15 修改: 2026-02-13 21:16

glibc CVE-2021-3999 中危 2.17-196.el7 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-24 16:15 修改: 2025-12-02 21:15

glibc CVE-2022-23218 中危 2.17-196.el7 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc CVE-2022-23219 中危 2.17-196.el7 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc CVE-2023-4806 中危 2.17-196.el7 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-18 17:15 修改: 2026-05-12 11:16

glibc CVE-2023-4813 中危 2.17-196.el7 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-12 22:15 修改: 2025-09-26 12:15

glibc CVE-2023-5156 中危 2.17-196.el7 glibc: DoS due to memory leak in getaddrinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5156

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-25 16:15 修改: 2024-11-21 08:41

glibc CVE-2024-33600 中危 2.17-196.el7 2.17-326.el7_9.3 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc CVE-2025-0395 中危 2.17-196.el7 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-22 13:15 修改: 2026-05-12 13:16

glibc CVE-2025-4802 中危 2.17-196.el7 2.17-326.el7_9.5 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-16 20:15 修改: 2025-11-03 20:19

glibc CVE-2025-8058 中危 2.17-196.el7 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-23 20:15 修改: 2026-04-15 00:35

glibc CVE-2026-0915 中危 2.17-196.el7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 22:16 修改: 2026-01-23 19:36

glibc CVE-2026-4046 中危 2.17-196.el7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-30 18:16 修改: 2026-04-20 22:16

glibc CVE-2026-4437 中危 2.17-196.el7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:41

glibc CVE-2026-5435 中危 2.17-196.el7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38

glibc CVE-2026-5450 中危 2.17-196.el7 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

glibc CVE-2026-5928 中危 2.17-196.el7 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

bind-license CVE-2022-3094 中危 32:9.9.4-50.el7 bind: flooding with UPDATE requests may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3094

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-26 21:15 修改: 2025-04-01 14:15

bind-license CVE-2026-3592 中危 32:9.9.4-50.el7 bind: Amplification vulnerabilities via self-pointed glue records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3592

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

glibc-common CVE-2009-5155 中危 2.17-196.el7 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

漏洞详情: https://avd.aquasec.com/nvd/cve-2009-5155

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-26 02:29 修改: 2024-11-21 01:11

glibc-common CVE-2015-8983 中危 2.17-196.el7 glibc: _IO_wstr_overflow integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8983

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc-common CVE-2016-10739 中危 2.17-196.el7 2.17-292.el7 glibc: getaddrinfo should reject IP addresses with trailing characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10739

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-21 19:29 修改: 2024-11-21 02:44

glibc-common CVE-2016-1234 中危 2.17-196.el7 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1234

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-01 20:59 修改: 2026-05-06 22:30

glibc-common CVE-2016-4429 中危 2.17-196.el7 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4429

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-10 15:59 修改: 2026-05-06 22:30

glibc-common CVE-2017-15670 中危 2.17-196.el7 2.17-222.el7 glibc: Buffer overflow in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15670

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-20 17:29 修改: 2025-04-20 01:37

glibc-common CVE-2017-15804 中危 2.17-196.el7 2.17-222.el7 glibc: Buffer overflow during unescaping of user names with the ~ operator

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15804

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-22 20:29 修改: 2025-04-20 01:37

glibc-common CVE-2017-16997 中危 2.17-196.el7 2.17-260.el7 glibc: Incorrect handling of RPATH in elf/dl-load.c can be used to execute code loaded from arbitrary libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16997

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-18 01:29 修改: 2025-04-20 01:37

glibc-common CVE-2017-8804 中危 2.17-196.el7 glibc: memory leak in sunrpc when decoding malformed XDR

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8804

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-07 18:29 修改: 2026-05-13 00:24

glibc-common CVE-2018-1000001 中危 2.17-196.el7 2.17-222.el7 glibc: realpath() buffer underflow when getcwd() returns relative path allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000001

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-31 14:29 修改: 2024-11-21 03:39

glibc-common CVE-2018-11236 中危 2.17-196.el7 2.17-260.el7 glibc: Integer overflow in stdlib/canonicalize.c on 32-bit architectures leading to stack-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11236

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-18 16:29 修改: 2024-11-21 03:42

glibc-common CVE-2018-11237 中危 2.17-196.el7 2.17-260.el7 glibc: Buffer overflow in __mempcpy_avx512_no_vzeroupper

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11237

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-18 16:29 修改: 2024-11-21 03:42

glibc-common CVE-2018-6485 中危 2.17-196.el7 2.17-260.el7 glibc: Integer overflow in posix_memalign in memalign functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6485

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-01 14:29 修改: 2024-11-21 04:10

glibc-common CVE-2019-25013 中危 2.17-196.el7 2.17-322.el7_9 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-04 18:15 修改: 2025-06-09 16:15

glibc-common CVE-2019-9169 中危 2.17-196.el7 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:51

glibc-common CVE-2020-10029 中危 2.17-196.el7 2.17-322.el7_9 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-03-04 15:15 修改: 2024-11-21 04:54

glibc-common CVE-2020-1752 中危 2.17-196.el7 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-04-30 17:15 修改: 2024-11-21 05:11

glibc-common CVE-2020-29573 中危 2.17-196.el7 2.17-322.el7_9 glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29573

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-06 00:15 修改: 2024-11-21 05:24

glibc-common CVE-2021-35942 中危 2.17-196.el7 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-22 18:15 修改: 2026-02-13 21:16

glibc-common CVE-2021-3999 中危 2.17-196.el7 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-24 16:15 修改: 2025-12-02 21:15

glibc-common CVE-2022-23218 中危 2.17-196.el7 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc-common CVE-2022-23219 中危 2.17-196.el7 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc-common CVE-2023-4806 中危 2.17-196.el7 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-18 17:15 修改: 2026-05-12 11:16

glibc-common CVE-2023-4813 中危 2.17-196.el7 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-12 22:15 修改: 2025-09-26 12:15

glibc-common CVE-2023-5156 中危 2.17-196.el7 glibc: DoS due to memory leak in getaddrinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5156

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-25 16:15 修改: 2024-11-21 08:41

glibc-common CVE-2024-33600 中危 2.17-196.el7 2.17-326.el7_9.3 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc-common CVE-2025-0395 中危 2.17-196.el7 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-22 13:15 修改: 2026-05-12 13:16

glibc-common CVE-2025-4802 中危 2.17-196.el7 2.17-326.el7_9.5 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-16 20:15 修改: 2025-11-03 20:19

glibc-common CVE-2025-8058 中危 2.17-196.el7 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-23 20:15 修改: 2026-04-15 00:35

glibc-common CVE-2026-0915 中危 2.17-196.el7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 22:16 修改: 2026-01-23 19:36

glibc-common CVE-2026-4046 中危 2.17-196.el7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-30 18:16 修改: 2026-04-20 22:16

glibc-common CVE-2026-4437 中危 2.17-196.el7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:41

glibc-common CVE-2026-5435 中危 2.17-196.el7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38

glibc-common CVE-2026-5450 中危 2.17-196.el7 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

glibc-common CVE-2026-5928 中危 2.17-196.el7 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

gmp CVE-2021-43618 中危 1:6.0.0-15.el7 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-15 04:15 修改: 2024-11-21 06:29

bind-license CVE-2026-5950 中危 32:9.9.4-50.el7 bind: Unbounded resend loop in BIND 9 resolver

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5950

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

binutils CVE-2017-6965 中危 2.25.1-31.base.el7 binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6965

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-17 09:59 修改: 2026-05-13 00:24

gnupg2 CVE-2014-4617 中危 2.0.22-4.el7 gnupg: infinite loop when decompressing data packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-4617

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-06-25 11:19 修改: 2026-05-06 22:30

gnupg2 CVE-2019-13050 中危 2.0.22-4.el7 GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13050

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-29 17:15 修改: 2024-11-21 04:24

gnupg2 CVE-2022-34903 中危 2.0.22-4.el7 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-01 22:15 修改: 2024-11-21 07:10

gnupg2 CVE-2025-68972 中危 2.0.22-4.el7 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-27 23:15 修改: 2026-01-09 20:08

binutils CVE-2017-6966 中危 2.25.1-31.base.el7 binutils: Use-after-free in target_specific_reloc_handling in readelf

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6966

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-17 09:59 修改: 2026-05-13 00:24

binutils CVE-2018-1000876 中危 2.25.1-31.base.el7 2.27-41.base.el7 binutils: integer overflow leads to heap-based buffer overflow in objdump

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000876

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-12-20 17:29 修改: 2024-11-21 03:40

binutils CVE-2018-18483 中危 2.25.1-31.base.el7 binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18483

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-18 21:29 修改: 2024-11-21 03:56

binutils CVE-2018-20673 中危 2.25.1-31.base.el7 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

binutils CVE-2019-9074 中危 2.25.1-31.base.el7 binutils: out-of-bound read in function bfd_getl32 in libbfd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9074

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-24 00:29 修改: 2024-11-21 04:50

gnutls CVE-2015-2808 中危 3.3.26-9.el7 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

gnutls CVE-2015-3308 中危 3.3.26-9.el7 gnutls: use-after-free flaw in CRL distribution points parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3308

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-09-02 14:59 修改: 2026-05-06 22:30

gnutls CVE-2015-6251 中危 3.3.26-9.el7 gnutls: double free flaw in certificate DN decoding (GNUTLS-SA-2015-3)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-6251

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-08-24 14:59 修改: 2026-05-06 22:30

gnutls CVE-2016-8610 中危 3.3.26-9.el7 SSL/TLS: Malformed plain-text ALERT packets could cause remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8610

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-11-13 22:29 修改: 2025-04-20 01:37

gnutls CVE-2018-10844 中危 3.3.26-9.el7 3.3.29-8.el7 gnutls: HMAC-SHA-256 vulnerable to Lucky thirteen attack due to not enough dummy function calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10844

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-08-22 13:29 修改: 2024-11-21 03:42

gnutls CVE-2018-10845 中危 3.3.26-9.el7 3.3.29-8.el7 gnutls: HMAC-SHA-384 vulnerable to Lucky thirteen attack due to use of wrong constant

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10845

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-08-22 13:29 修改: 2024-11-21 03:42

gnutls CVE-2018-10846 中危 3.3.26-9.el7 3.3.29-8.el7 gnutls: "Just in Time" PRIME + PROBE cache-based side channel attack can lead to plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10846

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-08-22 13:29 修改: 2024-11-21 03:42

gnutls CVE-2018-16868 中危 3.3.26-9.el7 gnutls: Bleichenbacher-like side channel leakage in PKCS#1 v1.5 verification and padding oracle verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16868

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-12-03 14:29 修改: 2024-11-21 03:53

gnutls CVE-2022-2509 中危 3.3.26-9.el7 gnutls: Double free during gnutls_pkcs7_verify

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-08-01 14:15 修改: 2025-12-02 21:15

gnutls CVE-2023-0361 中危 3.3.26-9.el7 gnutls: timing side-channel in the TLS RSA key exchange code

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-02-15 18:15 修改: 2025-03-19 18:15

gnutls CVE-2023-5981 中危 3.3.26-9.el7 gnutls: timing side-channel in the RSA-PSK authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-11-28 12:15 修改: 2026-03-25 20:01

gnutls CVE-2024-0553 中危 3.3.26-9.el7 gnutls: incomplete fix for CVE-2023-5981

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-01-16 12:15 修改: 2026-03-24 12:16

gnutls CVE-2024-0567 中危 3.3.26-9.el7 gnutls: rejects certificate chain with distributed trust

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0567

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-01-16 14:15 修改: 2024-11-21 08:46

gnutls CVE-2024-12243 中危 3.3.26-9.el7 gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-02-10 16:15 修改: 2026-05-12 12:16

gnutls CVE-2024-28834 中危 3.3.26-9.el7 gnutls: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-21 14:15 修改: 2026-04-15 00:35

gnutls CVE-2024-28835 中危 3.3.26-9.el7 gnutls: potential crash during chain building/verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-21 06:15 修改: 2026-04-15 00:35

gnutls CVE-2025-14831 中危 3.3.26-9.el7 gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-02-09 15:16 修改: 2026-06-10 18:16

gnutls CVE-2025-32988 中危 3.3.26-9.el7 gnutls: Vulnerability in GnuTLS otherName SAN export

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32988

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 08:15 修改: 2026-05-12 13:16

gnutls CVE-2025-32989 中危 3.3.26-9.el7 gnutls: Vulnerability in GnuTLS SCT extension parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32989

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 08:15 修改: 2026-05-12 13:16

gnutls CVE-2025-32990 中危 3.3.26-9.el7 gnutls: Vulnerability in GnuTLS certtool template parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32990

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 10:15 修改: 2026-04-20 22:16

gnutls CVE-2025-6395 中危 3.3.26-9.el7 gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6395

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 16:15 修改: 2026-05-12 13:17

gnutls CVE-2026-3833 中危 3.3.26-9.el7 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-30 18:16 修改: 2026-06-02 16:16

gnutls CVE-2026-42011 中危 3.3.26-9.el7 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-07 15:16 修改: 2026-06-02 16:16

gnutls CVE-2026-42012 中危 3.3.26-9.el7 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16

gnutls CVE-2026-42013 中危 3.3.26-9.el7 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16

gnutls CVE-2026-42014 中危 3.3.26-9.el7 gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

gnutls CVE-2026-42015 中危 3.3.26-9.el7 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16

gnutls CVE-2026-5260 中危 3.3.26-9.el7 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16

gobject-introspection CVE-2015-9381 中危 1.50.0-1.el7 1.56.1-1.el7 freetype: a heap-based buffer over-read in T1_Get_Private_Dict in type1/t1parse.c leading to crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9381

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-03 05:15 修改: 2024-11-21 02:40

gobject-introspection CVE-2015-9382 中危 1.50.0-1.el7 1.56.1-1.el7 freetype: mishandling ps_parser_skip_PS_token in an FT_New_Memory_Face operation in skip_comment, psaux/psobjs.c, leads to a buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-9382

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-03 05:15 修改: 2024-11-21 02:40

gobject-introspection CVE-2017-2862 中危 1.50.0-1.el7 1.56.1-1.el7 gdk-pixbuf2: Heap overflow in the gdk_pixbuf__jpeg_image_load_increment function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-2862

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-05 18:29 修改: 2026-05-13 00:24

gobject-introspection CVE-2018-11712 中危 1.50.0-1.el7 1.56.1-1.el7 webkitgtk: Improper TLS certificate verification for WebSocket connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11712

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-04 14:29 修改: 2024-11-21 03:43

gobject-introspection CVE-2018-11713 中危 1.50.0-1.el7 1.56.1-1.el7 webkitgtk: WebSockets don't use system proxy settings

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-11713

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-04 14:29 修改: 2024-11-21 03:43

gobject-introspection CVE-2018-12910 中危 1.50.0-1.el7 1.56.1-1.el7 libsoup: Crash in soup_cookie_jar.c:get_cookies() on empty hostnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12910

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-05 18:29 修改: 2024-11-21 03:46

gobject-introspection CVE-2018-14036 中危 1.50.0-1.el7 1.56.1-1.el7 accountsservice: insufficient path check in user_change_icon_file_authorized_cb() in user.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14036

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-13 12:29 修改: 2024-11-21 03:48

gobject-introspection CVE-2018-4121 中危 1.50.0-1.el7 1.56.1-1.el7 webkitgtk: memory corruption processing maliciously crafted web content

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4121

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-03 06:29 修改: 2024-11-21 04:06

gobject-introspection CVE-2018-4200 中危 1.50.0-1.el7 1.56.1-1.el7 webkitgtk: memory corruption processing maliciously crafted web content

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4200

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-08 18:29 修改: 2024-11-21 04:06

gobject-introspection CVE-2018-4204 中危 1.50.0-1.el7 1.56.1-1.el7 webkitgtk: memory corruption processing maliciously crafted web content

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-4204

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-08 18:29 修改: 2024-11-21 04:06

binutils CVE-2019-9075 中危 2.25.1-31.base.el7 binutils: heap-based buffer overflow in function _bfd_archive_64_bit_slurp_armap in archive64.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9075

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-24 00:29 修改: 2024-11-21 04:50

iputils CVE-2025-47268 中危 20160308-10.el7 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47268

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-05 14:15 修改: 2026-04-06 14:12

iputils CVE-2025-48964 中危 20160308-10.el7 iputils: iputils integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48964

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-22 18:15 修改: 2026-04-15 00:35

binutils CVE-2019-9077 中危 2.25.1-31.base.el7 binutils: heap-based buffer overflow in function process_mips_specific in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9077

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-24 00:29 修改: 2024-11-21 04:50

binutils CVE-2020-16590 中危 2.25.1-31.base.el7 binutils: double free vulnerability in process_symbol_table could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16590

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

krb5-libs CVE-2014-5351 中危 1.15.1-8.el7 krb5: current keys returned when randomizing the keys for a service principal

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5351

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-10-10 01:55 修改: 2026-05-06 22:30

krb5-libs CVE-2015-2695 中危 1.15.1-8.el7 krb5: SPNEGO context aliasing bugs

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2695

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 03:59 修改: 2026-05-06 22:30

krb5-libs CVE-2015-2696 中危 1.15.1-8.el7 krb5: IAKERB context aliasing flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2696

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 03:59 修改: 2026-05-06 22:30

krb5-libs CVE-2015-2697 中危 1.15.1-8.el7 krb5: build_principal() memory flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2697

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 03:59 修改: 2026-05-06 22:30

krb5-libs CVE-2017-11368 中危 1.15.1-8.el7 1.15.1-18.el7 krb5: Invalid S4U2Self or S4U2Proxy request causes assertion failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11368

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-09 18:29 修改: 2026-05-13 00:24

krb5-libs CVE-2017-15088 中危 1.15.1-8.el7 krb5: Buffer overflow in get_matching_data()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15088

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-23 17:29 修改: 2025-04-20 01:37

krb5-libs CVE-2017-7562 中危 1.15.1-8.el7 1.15.1-18.el7 krb5: Authentication bypass by improper validation of certificate EKU and SAN

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7562

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-26 15:29 修改: 2024-11-21 03:32

krb5-libs CVE-2018-20217 中危 1.15.1-8.el7 1.15.1-37.el7_7.2 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-12-26 21:29 修改: 2024-11-21 04:01

krb5-libs CVE-2020-17049 中危 1.15.1-8.el7 Kerberos: delegation constrain bypass in S4U2Proxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-11 07:15 修改: 2024-11-21 05:07

krb5-libs CVE-2020-28196 中危 1.15.1-8.el7 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-06 08:15 修改: 2025-12-03 19:15

krb5-libs CVE-2021-36222 中危 1.15.1-8.el7 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-22 18:15 修改: 2024-11-21 06:13

krb5-libs CVE-2021-37750 中危 1.15.1-8.el7 1.15.1-51.el7_9 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-23 05:15 修改: 2024-11-21 06:15

krb5-libs CVE-2024-26462 中危 1.15.1-8.el7 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-29 01:44 修改: 2025-03-25 20:15

krb5-libs CVE-2024-37370 中危 1.15.1-8.el7 1.15.1-55.el7_9.2 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-28 22:15 修改: 2026-05-12 12:16

krb5-libs CVE-2024-37371 中危 1.15.1-8.el7 1.15.1-55.el7_9.2 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-28 23:15 修改: 2026-05-12 12:16

krb5-libs CVE-2025-24528 中危 1.15.1-8.el7 1.15.1-55.el7_9.4 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-16 18:16 修改: 2026-04-15 00:35

krb5-libs CVE-2025-3576 中危 1.15.1-8.el7 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-15 06:15 修改: 2026-05-12 13:17

krb5-libs CVE-2026-40355 中危 1.15.1-8.el7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-28 06:16 修改: 2026-04-28 20:11

krb5-libs CVE-2026-40356 中危 1.15.1-8.el7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-28 07:16 修改: 2026-04-28 20:11

lapack CVE-2021-4048 中危 3.4.2-8.el7 lapack: Out-of-bounds read in *larrv

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4048

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:36

binutils CVE-2020-16592 中危 2.25.1-31.base.el7 binutils: use-after-free in bfd_hash_lookup could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16592

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

less CVE-2022-48624 中危 458-9.el7 less: missing quoting of shell metacharacters in LESSCLOSE handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48624

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-02-19 01:15 修改: 2025-03-27 15:15

libblkid CVE-2014-9114 中危 2.23.2-43.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

libblkid CVE-2016-2779 中危 2.23.2-43.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

libblkid CVE-2020-21583 中危 2.23.2-43.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

libblkid CVE-2022-0563 中危 2.23.2-43.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

libblkid CVE-2025-14104 中危 2.23.2-43.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

binutils CVE-2021-20197 中危 2.25.1-31.base.el7 binutils: Race window allows users to own arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20197

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-26 17:15 修改: 2025-12-03 15:15

libcap CVE-2023-2603 中危 2.22-9.el7 libcap: Integer Overflow in _libcap_strdup()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2603

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-06 20:15 修改: 2025-12-02 21:15

libcom_err CVE-2015-0247 中危 1.42.9-10.el7 e2fsprogs: ext2fs_open2() missing first_meta_bg boundary check leading to heap buffer overflow (oCERT-015-002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0247

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-17 15:59 修改: 2026-05-06 22:30

libcom_err CVE-2019-5094 中危 1.42.9-10.el7 1.42.9-19.el7 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-24 22:15 修改: 2025-05-30 19:15

libcom_err CVE-2019-5188 中危 1.42.9-10.el7 1.42.9-19.el7 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 16:15 修改: 2024-11-21 04:44

libcom_err CVE-2022-1304 中危 1.42.9-10.el7 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-04-14 21:15 修改: 2025-04-23 19:15

libcurl CVE-2015-3153 中危 7.29.0-42.el7 curl: sensitive HTTP server headers also sent to proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3153

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-05-01 15:59 修改: 2026-05-06 22:30

libcurl CVE-2016-8615 中危 7.29.0-42.el7 curl: Cookie injection for other servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8615

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8617 中危 7.29.0-42.el7 curl: Out-of-bounds write via unchecked multiplication

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8617

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8618 中危 7.29.0-42.el7 curl: Double-free in curl_maprintf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8618

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8619 中危 7.29.0-42.el7 curl: Double-free in krb5 code

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8619

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8624 中危 7.29.0-42.el7 curl: Invalid URL parsing with '#'

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8624

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8625 中危 7.29.0-42.el7 curl: IDNA 2003 makes curl use wrong host

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8625

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2017-1000254 中危 7.29.0-42.el7 curl: FTP PWD response parser out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000254

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-06 13:29 修改: 2026-05-13 00:24

libcurl CVE-2017-1000257 中危 7.29.0-42.el7 7.29.0-42.el7_4.1 curl: IMAP FETCH response out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000257

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-31 21:29 修改: 2026-04-15 21:16

libcurl CVE-2017-8817 中危 7.29.0-42.el7 curl: FTP wildcard out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8817

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-29 18:29 修改: 2026-04-15 21:16

libcurl CVE-2018-1000007 中危 7.29.0-42.el7 7.29.0-51.el7 curl: HTTP authentication leak in redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-24 22:29 修改: 2024-11-21 03:39

libcurl CVE-2018-1000120 中危 7.29.0-42.el7 7.29.0-51.el7 curl: FTP path trickery leads to NIL byte out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000120

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

libcurl CVE-2018-1000122 中危 7.29.0-42.el7 7.29.0-51.el7 curl: RTSP RTP buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000122

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

libcurl CVE-2018-1000301 中危 7.29.0-42.el7 7.29.0-51.el7 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000301

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-24 13:29 修改: 2026-04-15 21:16

libcurl CVE-2019-5482 中危 7.29.0-42.el7 7.29.0-59.el7 curl: heap buffer overflow in function tftp_receive_packet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5482

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-16 19:15 修改: 2026-04-15 21:17

libcurl CVE-2020-8177 中危 7.29.0-42.el7 7.29.0-59.el7_9.1 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2026-04-15 21:17

libcurl CVE-2020-8284 中危 7.29.0-42.el7 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

libcurl CVE-2020-8285 中危 7.29.0-42.el7 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

libcurl CVE-2021-22876 中危 7.29.0-42.el7 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-01 18:15 修改: 2025-06-09 15:15

libcurl CVE-2021-22924 中危 7.29.0-42.el7 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-05 21:15 修改: 2025-06-09 15:15

libcurl CVE-2021-22946 中危 7.29.0-42.el7 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

libcurl CVE-2021-22947 中危 7.29.0-42.el7 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

libcurl CVE-2022-27774 中危 7.29.0-42.el7 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

libcurl CVE-2022-27776 中危 7.29.0-42.el7 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27778 中危 7.29.0-42.el7 curl: removes wrong file on error

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27778

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27779 中危 7.29.0-42.el7 curl: cookie for trailing dot TLD

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27779

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27780 中危 7.29.0-42.el7 curl: percent-encoded path separator in URL host

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27780

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27782 中危 7.29.0-42.el7 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

libcurl CVE-2022-30115 中危 7.29.0-42.el7 curl: HSTS bypass via trailing dot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30115

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 07:02

libcurl CVE-2022-32208 中危 7.29.0-42.el7 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-07 13:15 修改: 2025-05-05 17:18

libcurl CVE-2022-43551 中危 7.29.0-42.el7 curl: HSTS bypass via IDN

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-12-23 15:15 修改: 2026-02-13 20:16

libcurl CVE-2023-27535 中危 7.29.0-42.el7 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

libcurl CVE-2023-27536 中危 7.29.0-42.el7 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-02-14 16:15

libcurl CVE-2023-27538 中危 7.29.0-42.el7 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

libcurl CVE-2023-28321 中危 7.29.0-42.el7 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-26 21:15 修改: 2025-01-15 16:15

libcurl CVE-2024-2398 中危 7.29.0-42.el7 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-27 08:15 修改: 2025-07-30 19:42

libcurl CVE-2025-13034 中危 7.29.0-42.el7 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:54

libcurl CVE-2025-14017 中危 7.29.0-42.el7 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-27 21:29

libcurl CVE-2025-9086 中危 7.29.0-42.el7 curl: libcurl: Curl out of bounds read for cookie path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-12 06:15 修改: 2026-06-02 14:16

libcurl CVE-2026-1965 中危 7.29.0-42.el7 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:15 修改: 2026-03-12 14:11

libcurl CVE-2026-3783 中危 7.29.0-42.el7 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:10

libcurl CVE-2026-3784 中危 7.29.0-42.el7 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:16 修改: 2026-06-02 14:16

libcurl CVE-2026-3805 中危 7.29.0-42.el7 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:08

libcurl CVE-2026-4873 中危 7.29.0-42.el7 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:45

libcurl CVE-2026-5545 中危 7.29.0-42.el7 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:31

libcurl CVE-2026-5773 中危 7.29.0-42.el7 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:13

libcurl CVE-2026-6253 中危 7.29.0-42.el7 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:40

libcurl CVE-2026-6429 中危 7.29.0-42.el7 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:18

libcurl CVE-2026-7168 中危 7.29.0-42.el7 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:12

libdb CVE-2017-10140 中危 5.3.21-20.el7 libdb: Reads DB_CONFIG from the current working directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10140

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-16 17:29 修改: 2024-11-21 03:05

libdb-utils CVE-2017-10140 中危 5.3.21-20.el7 libdb: Reads DB_CONFIG from the current working directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10140

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-16 17:29 修改: 2024-11-21 03:05

libgcc CVE-2014-5044 中危 4.8.5-16.el7 gcc: integer overflow flaws in libgfortran

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5044

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-07 15:29 修改: 2024-11-21 02:11

libgcc CVE-2018-20673 中危 4.8.5-16.el7 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

libgcc CVE-2019-16276 中危 4.8.5-16.el7 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-30 19:15 修改: 2024-11-21 04:30

libgcc CVE-2020-11023 中危 4.8.5-16.el7 4.8.5-45.el7_9 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-04-29 21:15 修改: 2025-11-07 19:32

libgcc CVE-2020-16845 中危 4.8.5-16.el7 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-08-06 18:15 修改: 2024-11-21 05:07

libgcc CVE-2020-24553 中危 4.8.5-16.el7 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14

libgcc CVE-2020-28362 中危 4.8.5-16.el7 golang: math/big: panic during recursive division of very large numbers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28362

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgcc CVE-2020-28366 中危 4.8.5-16.el7 golang: malicious symbol names can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28366

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgcc CVE-2020-28367 中危 4.8.5-16.el7 golang: improper validation of cgo flags can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28367

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgcc CVE-2021-27918 中危 4.8.5-16.el7 golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58

libgcc CVE-2021-42574 中危 4.8.5-16.el7 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

libgcrypt CVE-2014-5270 中危 1.5.3-14.el7 libgcrypt: ELGAMAL side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5270

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-10-10 01:55 修改: 2026-05-06 22:30

libgcrypt CVE-2017-7526 中危 1.5.3-14.el7 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7526

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-26 13:29 修改: 2024-11-21 03:32

libgcrypt CVE-2019-12904 中危 1.5.3-14.el7 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12904

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-20 00:15 修改: 2024-11-21 04:23

libgcrypt CVE-2021-33560 中危 1.5.3-14.el7 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-08 11:15 修改: 2025-12-03 15:15

libgcrypt CVE-2021-40528 中危 1.5.3-14.el7 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-06 19:15 修改: 2025-06-09 16:15

libgcrypt CVE-2024-2236 中危 1.5.3-14.el7 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-06 22:15 修改: 2026-04-15 00:35

libgcrypt CVE-2026-41989 中危 1.5.3-14.el7 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-23 05:16 修改: 2026-04-27 18:33

libgfortran CVE-2014-5044 中危 4.8.5-16.el7_4.1 gcc: integer overflow flaws in libgfortran

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5044

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-03-07 15:29 修改: 2024-11-21 02:11

libgfortran CVE-2018-20673 中危 4.8.5-16.el7_4.1 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

libgfortran CVE-2019-16276 中危 4.8.5-16.el7_4.1 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16276

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-09-30 19:15 修改: 2024-11-21 04:30

libgfortran CVE-2020-11023 中危 4.8.5-16.el7_4.1 4.8.5-45.el7_9 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-04-29 21:15 修改: 2025-11-07 19:32

libgfortran CVE-2020-16845 中危 4.8.5-16.el7_4.1 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-08-06 18:15 修改: 2024-11-21 05:07

libgfortran CVE-2020-24553 中危 4.8.5-16.el7_4.1 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14

libgfortran CVE-2020-28362 中危 4.8.5-16.el7_4.1 golang: math/big: panic during recursive division of very large numbers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28362

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgfortran CVE-2020-28366 中危 4.8.5-16.el7_4.1 golang: malicious symbol names can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28366

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgfortran CVE-2020-28367 中危 4.8.5-16.el7_4.1 golang: improper validation of cgo flags can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28367

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgfortran CVE-2021-27918 中危 4.8.5-16.el7_4.1 golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58

libgfortran CVE-2021-42574 中危 4.8.5-16.el7_4.1 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

libmount CVE-2014-9114 中危 2.23.2-43.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

libmount CVE-2016-2779 中危 2.23.2-43.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

libmount CVE-2020-21583 中危 2.23.2-43.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

libmount CVE-2022-0563 中危 2.23.2-43.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

libmount CVE-2025-14104 中危 2.23.2-43.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

libpcap CVE-2023-7256 中危 14:1.5.3-9.el7 libpcap: Double Free in libcap

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7256

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-08-31 00:15 修改: 2024-09-19 17:53

libpcap CVE-2024-8006 中危 14:1.5.3-9.el7 libpcap: NULL pointer derefence in pcap_findalldevs_ex() in pcap-new.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8006

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-08-31 00:15 修改: 2024-09-19 17:46

libquadmath CVE-2014-5044 中危 4.8.5-16.el7_4.1 gcc: integer overflow flaws in libgfortran

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5044

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-03-07 15:29 修改: 2024-11-21 02:11

libquadmath CVE-2018-20673 中危 4.8.5-16.el7_4.1 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

libquadmath CVE-2019-16276 中危 4.8.5-16.el7_4.1 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16276

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-09-30 19:15 修改: 2024-11-21 04:30

libquadmath CVE-2020-11023 中危 4.8.5-16.el7_4.1 4.8.5-45.el7_9 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-04-29 21:15 修改: 2025-11-07 19:32

libquadmath CVE-2020-16845 中危 4.8.5-16.el7_4.1 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-08-06 18:15 修改: 2024-11-21 05:07

libquadmath CVE-2020-24553 中危 4.8.5-16.el7_4.1 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14

libquadmath CVE-2020-28362 中危 4.8.5-16.el7_4.1 golang: math/big: panic during recursive division of very large numbers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28362

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libquadmath CVE-2020-28366 中危 4.8.5-16.el7_4.1 golang: malicious symbol names can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28366

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libquadmath CVE-2020-28367 中危 4.8.5-16.el7_4.1 golang: improper validation of cgo flags can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28367

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libquadmath CVE-2021-27918 中危 4.8.5-16.el7_4.1 golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58

libquadmath CVE-2021-3114 中危 4.8.5-16.el7_4.1 golang: crypto/elliptic: incorrect operations on the P-224 curve

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20

libquadmath CVE-2021-42574 中危 4.8.5-16.el7_4.1 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

libsepol CVE-2021-36084 中危 2.5-6.el7 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-01 03:15 修改: 2025-11-03 22:15

libsepol CVE-2021-36085 中危 2.5-6.el7 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-01 03:15 修改: 2025-11-03 22:15

libsepol CVE-2021-36086 中危 2.5-6.el7 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-01 03:15 修改: 2026-03-24 20:25

libsepol CVE-2021-36087 中危 2.5-6.el7 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-01 03:15 修改: 2025-11-03 22:15

libss CVE-2015-0247 中危 1.42.9-10.el7 e2fsprogs: ext2fs_open2() missing first_meta_bg boundary check leading to heap buffer overflow (oCERT-015-002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0247

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-17 15:59 修改: 2026-05-06 22:30

libss CVE-2019-5094 中危 1.42.9-10.el7 1.42.9-19.el7 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-24 22:15 修改: 2025-05-30 19:15

libss CVE-2019-5188 中危 1.42.9-10.el7 1.42.9-19.el7 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 16:15 修改: 2024-11-21 04:44

libss CVE-2022-1304 中危 1.42.9-10.el7 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-04-14 21:15 修改: 2025-04-23 19:15

binutils CVE-2021-20294 中危 2.25.1-31.base.el7 binutils: stack buffer overflow WRITE may lead to a DoS via a crafted ELF

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20294

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-29 16:15 修改: 2024-11-21 05:46

binutils CVE-2021-37322 中危 2.25.1-31.base.el7 binutils: use-after-free in c++filt in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37322

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-18 22:15 修改: 2024-11-21 06:14

binutils CVE-2021-42574 中危 2.25.1-31.base.el7 2.27-44.base.el7_9.1 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

binutils CVE-2021-45078 中危 2.25.1-31.base.el7 binutils: out-of-bounds write in stab_xcoff_builtin_type() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45078

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-15 20:15 修改: 2024-11-21 06:31

binutils CVE-2022-4285 中危 2.25.1-31.base.el7 binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4285

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-27 18:15 修改: 2025-03-28 16:15

libssh2 CVE-2019-13115 中危 1.4.3-10.el7_2.1 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-16 18:15 修改: 2024-11-21 04:24

libssh2 CVE-2019-17498 中危 1.4.3-10.el7_2.1 1.8.0-4.el7 libssh2: integer overflow in SSH_MSG_DISCONNECT logic in packet.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17498

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-21 22:15 修改: 2024-11-21 04:32

libssh2 CVE-2019-3858 中危 1.4.3-10.el7_2.1 1.8.0-3.el7 libssh2: Zero-byte allocation with a specially crafted SFTP packed leading to an out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3858

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-21 21:29 修改: 2024-11-21 04:42

libssh2 CVE-2019-3859 中危 1.4.3-10.el7_2.1 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3859

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-21 16:01 修改: 2025-12-18 12:15

libssh2 CVE-2019-3860 中危 1.4.3-10.el7_2.1 libssh2: Out-of-bounds reads with specially crafted SFTP packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3860

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-25 19:29 修改: 2024-11-21 04:42

libssh2 CVE-2019-3861 中危 1.4.3-10.el7_2.1 1.8.0-3.el7 libssh2: Out-of-bounds reads with specially crafted SSH packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3861

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-25 19:29 修改: 2024-11-21 04:42

libssh2 CVE-2019-3862 中危 1.4.3-10.el7_2.1 1.4.3-12.el7_6.3 libssh2: Out-of-bounds memory comparison with specially crafted message channel request

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3862

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-21 16:01 修改: 2024-11-21 04:42

libssh2 CVE-2020-22218 中危 1.4.3-10.el7_2.1 1.8.0-4.el7_9.1 libssh2: use-of-uninitialized-value in _libssh2_transport_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-22218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:13

libssh2 CVE-2023-2283 中危 1.4.3-10.el7_2.1 libssh: authorization bypass in pki_verify_data_signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2283

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-26 18:15 修改: 2025-11-03 21:15

libssh2 CVE-2023-48795 中危 1.4.3-10.el7_2.1 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-18 16:15 修改: 2026-05-12 11:16

libssh2 CVE-2025-5351 中危 1.4.3-10.el7_2.1 libssh: Double Free Vulnerability in libssh Key Export Functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5351

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-04 09:15 修改: 2026-05-19 14:16

libssh2 CVE-2025-5372 中危 1.4.3-10.el7_2.1 libssh: Incorrect Return Code Handling in ssh_kdf() in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5372

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-04 06:15 修改: 2026-06-08 03:16

libssh2 CVE-2025-5987 中危 1.4.3-10.el7_2.1 libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5987

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-07 15:15 修改: 2026-03-20 21:17

libssh2 CVE-2026-3731 中危 1.4.3-10.el7_2.1 libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-08 11:15 修改: 2026-03-12 19:02

libstdc++ CVE-2014-5044 中危 4.8.5-16.el7 gcc: integer overflow flaws in libgfortran

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5044

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-07 15:29 修改: 2024-11-21 02:11

libstdc++ CVE-2018-20673 中危 4.8.5-16.el7 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

libstdc++ CVE-2019-16276 中危 4.8.5-16.el7 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-30 19:15 修改: 2024-11-21 04:30

libstdc++ CVE-2020-11023 中危 4.8.5-16.el7 4.8.5-45.el7_9 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-04-29 21:15 修改: 2025-11-07 19:32

libstdc++ CVE-2020-16845 中危 4.8.5-16.el7 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-08-06 18:15 修改: 2024-11-21 05:07

libstdc++ CVE-2020-24553 中危 4.8.5-16.el7 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14

libstdc++ CVE-2020-28362 中危 4.8.5-16.el7 golang: math/big: panic during recursive division of very large numbers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28362

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libstdc++ CVE-2020-28366 中危 4.8.5-16.el7 golang: malicious symbol names can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28366

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libstdc++ CVE-2020-28367 中危 4.8.5-16.el7 golang: improper validation of cgo flags can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28367

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libstdc++ CVE-2021-27918 中危 4.8.5-16.el7 golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58

libstdc++ CVE-2021-42574 中危 4.8.5-16.el7 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

libtasn1 CVE-2016-4008 中危 4.10-1.el7 libtasn1: infinite loop while parsing DER certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4008

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-05-05 18:59 修改: 2026-05-06 22:30

libtasn1 CVE-2018-6003 中危 4.10-1.el7 libtasn1: Stack exhaustion due to indefinite recursion during BER decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6003

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-22 20:29 修改: 2024-11-21 04:09

libtasn1 CVE-2021-46848 中危 4.10-1.el7 libtasn1: Out-of-bound access in ETYPE_OK

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-24 14:15 修改: 2025-05-07 15:15

libtasn1 CVE-2024-12133 中危 4.10-1.el7 libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-10 16:15 修改: 2026-05-12 12:16

libuuid CVE-2014-9114 中危 2.23.2-43.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

libuuid CVE-2016-2779 中危 2.23.2-43.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

libuuid CVE-2020-21583 中危 2.23.2-43.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

libuuid CVE-2022-0563 中危 2.23.2-43.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

libuuid CVE-2025-14104 中危 2.23.2-43.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

binutils CVE-2023-1579 中危 2.25.1-31.base.el7 binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1579

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-03 23:15 修改: 2025-02-13 15:15

binutils CVE-2025-11081 中危 2.25.1-31.base.el7 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-27 22:15 修改: 2026-04-29 01:00

binutils CVE-2025-11082 中危 2.25.1-31.base.el7 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-27 23:15 修改: 2026-05-12 13:16

binutils CVE-2025-11083 中危 2.25.1-31.base.el7 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-27 23:15 修改: 2026-05-12 13:16

binutils CVE-2025-5245 中危 2.25.1-31.base.el7 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-27 15:15 修改: 2026-05-12 13:17

binutils CVE-2025-7545 中危 2.25.1-31.base.el7 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-13 22:15 修改: 2026-05-12 13:17

binutils CVE-2025-7546 中危 2.25.1-31.base.el7 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-13 22:15 修改: 2026-05-12 13:17

binutils CVE-2026-4647 中危 2.25.1-31.base.el7 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-23 14:16 修改: 2026-03-24 19:02

libvirt-libs CVE-2013-6456 中危 3.2.0-14.el7_4.7 libvirt: unsafe usage of paths under /proc/$PID/root

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-6456

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2014-04-15 23:55 修改: 2026-05-06 22:30

libvirt-libs CVE-2014-0028 中危 3.2.0-14.el7_4.7 libvirt: event registration bypasses domain:getattr ACL

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0028

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2014-01-24 18:55 修改: 2026-04-29 01:13

libvirt-libs CVE-2014-1447 中危 3.2.0-14.el7_4.7 libvirt: denial of service with keepalive

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-1447

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2014-01-24 18:55 修改: 2026-04-29 01:13

libvirt-libs CVE-2018-12126 中危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.9 hardware: Microarchitectural Store Buffer Data Sampling (MSBDS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12126

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-05-30 16:29 修改: 2026-05-29 21:16

libvirt-libs CVE-2018-12127 中危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.9 hardware: Micro-architectural Load Port Data Sampling - Information Leak (MLPDS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12127

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-05-30 16:29 修改: 2026-05-29 21:16

libvirt-libs CVE-2018-6764 中危 3.2.0-14.el7_4.7 4.5.0-10.el7 libvirt: guest could inject executable code via libnss_dns.so loaded by libvirt_lxc before init

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6764

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-02-23 17:29 修改: 2024-11-21 04:11

libvirt-libs CVE-2019-11091 中危 3.2.0-14.el7_4.7 4.5.0-10.el7_6.9 hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11091

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-05-30 16:29 修改: 2026-05-28 19:16

libvirt-libs CVE-2019-20485 中危 3.2.0-14.el7_4.7 4.5.0-36.el7 libvirt: Potential DoS by holding a monitor job while querying QEMU guest-agent

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20485

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-03-19 02:15 修改: 2024-11-21 04:38

libvirt-libs CVE-2019-3840 中危 3.2.0-14.el7_4.7 4.5.0-23.el7 libvirt: NULL pointer dereference after running qemuAgentCommand in qemuAgentGetInterfaces function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3840

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-03-27 13:29 修改: 2024-11-21 04:42

libvirt-libs CVE-2020-10703 中危 3.2.0-14.el7_4.7 4.5.0-36.el7 libvirt: Potential denial of service via active pool without target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10703

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-02 13:15 修改: 2024-11-21 04:55

libvirt-libs CVE-2020-25637 中危 3.2.0-14.el7_4.7 4.5.0-36.el7_9.3 libvirt: double free in qemuAgentGetInterfaces() in qemu_agent.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25637

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-10-06 14:15 修改: 2024-11-21 05:18

libvirt-libs CVE-2023-2700 中危 3.2.0-14.el7_4.7 libvirt: Memory leak in virPCIVirtualFunctionList cleanup

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2700

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-05-15 22:15 修改: 2025-01-28 17:15

libvirt-libs CVE-2024-1441 中危 3.2.0-14.el7_4.7 libvirt: off-by-one error in udevListInterfacesByStatus()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1441

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-11 14:15 修改: 2026-04-15 00:35

libvirt-libs CVE-2024-2494 中危 3.2.0-14.el7_4.7 libvirt: negative g_new0 length can lead to unbounded memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2494

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-21 14:15 修改: 2026-04-15 00:35

libvirt-libs CVE-2024-2496 中危 3.2.0-14.el7_4.7 libvirt: NULL pointer dereference in udevConnectListAllInterfaces()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2496

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-18 13:15 修改: 2025-04-09 15:36

libvirt-libs CVE-2024-4418 中危 3.2.0-14.el7_4.7 libvirt: stack use-after-free in virNetClientIOEventLoop()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4418

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-08 03:15 修改: 2026-04-15 00:35

libvirt-libs CVE-2025-12748 中危 3.2.0-14.el7_4.7 libvirt: Denial of service in XML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12748

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-11-11 20:15 修改: 2026-05-19 16:16

libvirt-libs CVE-2025-13193 中危 3.2.0-14.el7_4.7 libvirt: Information disclosure via world-readable VM snapshots

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13193

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-11-17 17:15 修改: 2026-04-15 00:35

libvirt-python CVE-2013-6456 中危 3.2.0-3.el7_4.1 libvirt: unsafe usage of paths under /proc/$PID/root

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-6456

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2014-04-15 23:55 修改: 2026-05-06 22:30

libvirt-python CVE-2014-0028 中危 3.2.0-3.el7_4.1 libvirt: event registration bypasses domain:getattr ACL

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0028

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2014-01-24 18:55 修改: 2026-04-29 01:13

libvirt-python CVE-2014-1447 中危 3.2.0-3.el7_4.1 libvirt: denial of service with keepalive

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-1447

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2014-01-24 18:55 修改: 2026-04-29 01:13

libvirt-python CVE-2023-2700 中危 3.2.0-3.el7_4.1 libvirt: Memory leak in virPCIVirtualFunctionList cleanup

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2700

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-05-15 22:15 修改: 2025-01-28 17:15

libvirt-python CVE-2024-1441 中危 3.2.0-3.el7_4.1 libvirt: off-by-one error in udevListInterfacesByStatus()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1441

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-11 14:15 修改: 2026-04-15 00:35

libvirt-python CVE-2024-2494 中危 3.2.0-3.el7_4.1 libvirt: negative g_new0 length can lead to unbounded memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2494

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-21 14:15 修改: 2026-04-15 00:35

libvirt-python CVE-2024-2496 中危 3.2.0-3.el7_4.1 libvirt: NULL pointer dereference in udevConnectListAllInterfaces()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2496

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-03-18 13:15 修改: 2025-04-09 15:36

libvirt-python CVE-2024-4418 中危 3.2.0-3.el7_4.1 libvirt: stack use-after-free in virNetClientIOEventLoop()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4418

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-08 03:15 修改: 2026-04-15 00:35

libvirt-python CVE-2025-12748 中危 3.2.0-3.el7_4.1 libvirt: Denial of service in XML parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12748

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-11-11 20:15 修改: 2026-05-19 16:16

libvirt-python CVE-2025-13193 中危 3.2.0-3.el7_4.1 libvirt: Information disclosure via world-readable VM snapshots

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13193

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-11-17 17:15 修改: 2026-04-15 00:35

binutils CVE-2026-6844 中危 2.25.1-31.base.el7 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-22 09:16 修改: 2026-05-20 14:00

binutils CVE-2026-6845 中危 2.25.1-31.base.el7 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-22 09:16 修改: 2026-05-20 13:58

blas CVE-2021-4048 中危 3.4.2-8.el7 lapack: Out-of-bounds read in *larrv

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4048

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:36

bzip2-libs CVE-2019-12900 中危 1.0.6-13.el7 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-19 23:15 修改: 2025-06-09 16:15

bzip2-libs CVE-2026-42250 中危 1.0.6-13.el7 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-28 14:16 修改: 2026-06-05 08:16

libxml2 CVE-2015-8035 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: DoS caused by incorrect error detection during XZ decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8035

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-18 16:59 修改: 2026-05-06 22:30

libxml2 CVE-2016-3709 中危 2.9.1-6.el7_2.3 libxml2: Incorrect server side include parsing can lead to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3709

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-28 17:15 修改: 2025-11-04 16:15

libxml2 CVE-2016-4483 中危 2.9.1-6.el7_2.3 libxml2: out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4483

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2 CVE-2016-4658 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.6 libxml2: Use after free via namespace node in XPointer ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4658

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-25 10:59 修改: 2026-05-06 22:30

libxml2 CVE-2016-5131 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free triggered by XPointer paths beginning with range-to

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5131

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-07-23 19:59 修改: 2026-05-06 22:30

libxml2 CVE-2016-9318 中危 2.9.1-6.el7_2.3 libxml2: XML External Entity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9318

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-11-16 00:59 修改: 2026-05-06 22:30

libxml2 CVE-2017-0663 中危 2.9.1-6.el7_2.3 libxml2: Heap buffer overflow in xmlAddID

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-0663

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-14 13:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-15412 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15412

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-28 19:29 修改: 2024-11-21 03:14

libxml2 CVE-2017-16931 中危 2.9.1-6.el7_2.3 libxml2: Mishandling parameter-entity references

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16931

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-23 21:29 修改: 2025-04-20 01:37

libxml2 CVE-2017-16932 中危 2.9.1-6.el7_2.3 libxml2: Infinite recursion in parameter entities

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16932

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-23 21:29 修改: 2026-01-22 18:16

libxml2 CVE-2017-7375 中危 2.9.1-6.el7_2.3 libxml2: Missing validation for external entities in xmlParsePEReference

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7375

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-19 19:29 修改: 2025-12-03 22:15

libxml2 CVE-2017-9047 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9047

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-9049 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-9050 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictAddString

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9050

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2018-14404 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-19 13:29 修改: 2025-12-03 21:15

libxml2 CVE-2019-19956 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19956

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-24 16:15 修改: 2025-12-03 19:15

libxml2 CVE-2019-20388 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20388

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-21 23:15 修改: 2025-12-17 22:15

libxml2 CVE-2020-24977 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24977

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-04 00:15 修改: 2024-11-21 05:16

libxml2 CVE-2020-7595 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7595

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-21 23:15 修改: 2025-12-03 16:15

libxml2 CVE-2021-3516 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3516

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-01 14:15 修改: 2024-11-21 06:21

libxml2 CVE-2021-3517 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3517

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-19 14:15 修改: 2025-12-02 22:16

libxml2 CVE-2021-3518 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3518

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-18 12:15 修改: 2024-11-21 06:21

libxml2 CVE-2021-3537 中危 2.9.1-6.el7_2.3 libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3537

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-14 20:15 修改: 2024-11-21 06:21

libxml2 CVE-2021-3541 中危 2.9.1-6.el7_2.3 libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3541

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-09 17:15 修改: 2024-11-21 06:21

libxml2 CVE-2022-23308 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free of ID and IDREF attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23308

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-26 05:15 修改: 2025-05-05 17:17

libxml2 CVE-2022-29824 中危 2.9.1-6.el7_2.3 libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29824

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-03 03:15 修改: 2024-11-21 06:59

libxml2 CVE-2022-40303 中危 2.9.1-6.el7_2.3 libxml2: integer overflows with XML_PARSE_HUGE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40303

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-23 00:15 修改: 2025-04-29 05:15

libxml2 CVE-2022-40304 中危 2.9.1-6.el7_2.3 libxml2: dict corruption caused by entity reference cycles

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40304

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-23 18:15 修改: 2025-04-28 20:15

libxml2 CVE-2022-49043 中危 2.9.1-6.el7_2.3 libxml: use-after-free in xmlXIncludeAddNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-49043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-26 06:15 修改: 2025-11-03 21:15

libxml2 CVE-2023-28484 中危 2.9.1-6.el7_2.3 libxml2: NULL dereference in xmlSchemaFixupComplexType

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28484

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-24 21:15 修改: 2025-05-30 20:15

libxml2 CVE-2023-29469 中危 2.9.1-6.el7_2.3 libxml2: Hashing of empty dict strings isn't deterministic

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29469

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-24 21:15 修改: 2025-02-04 21:15

libxml2 CVE-2023-39615 中危 2.9.1-6.el7_2.3 libxml2: crafted xml can cause global buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-29 17:15 修改: 2025-11-03 21:15

libxml2 CVE-2024-25062 中危 2.9.1-6.el7_2.3 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-04 16:15 修改: 2025-11-03 22:16

libxml2 CVE-2025-32414 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Out-of-Bounds Read in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32414

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-08 03:15 修改: 2025-11-03 20:18

libxml2 CVE-2025-32415 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.13 libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32415

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-17 17:15 修改: 2025-11-03 20:18

libxml2 CVE-2025-6021 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6021

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-12 13:15 修改: 2026-05-12 13:17

libxml2 CVE-2025-9714 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.14 libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9714

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-10 19:15 修改: 2026-05-12 13:17

libxml2 CVE-2026-0990 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2 CVE-2026-1757 中危 2.9.1-6.el7_2.3 libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1757

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-02 13:15 修改: 2026-04-22 10:16

libxml2 CVE-2026-6732 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-23 23:16 修改: 2026-05-15 14:36

coreutils CVE-2016-2781 中危 8.22-18.el7 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

coreutils CVE-2017-18018 中危 8.22-18.el7 coreutils: race condition vulnerability in chown and chgrp

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-04 04:29 修改: 2025-06-09 16:15

coreutils CVE-2025-5278 中危 8.22-18.el7 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-27 21:15 修改: 2026-05-19 17:16

cpio CVE-2019-14866 中危 2.11-24.el7 2.11-28.el7 cpio: improper input validation when writing tar header fields leads to unexpected tar generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14866

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-07 17:15 修改: 2024-11-21 04:27

cpio CVE-2021-38185 中危 2.11-24.el7 cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38185

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-08 00:15 修改: 2025-06-09 15:15

libxml2-python CVE-2015-8035 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: DoS caused by incorrect error detection during XZ decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8035

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-18 16:59 修改: 2026-05-06 22:30

libxml2-python CVE-2016-3709 中危 2.9.1-6.el7_2.3 libxml2: Incorrect server side include parsing can lead to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3709

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-28 17:15 修改: 2025-11-04 16:15

libxml2-python CVE-2016-4483 中危 2.9.1-6.el7_2.3 libxml2: out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4483

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2-python CVE-2016-4658 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.6 libxml2: Use after free via namespace node in XPointer ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4658

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-25 10:59 修改: 2026-05-06 22:30

libxml2-python CVE-2016-5131 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free triggered by XPointer paths beginning with range-to

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5131

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-07-23 19:59 修改: 2026-05-06 22:30

libxml2-python CVE-2016-9318 中危 2.9.1-6.el7_2.3 libxml2: XML External Entity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9318

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-11-16 00:59 修改: 2026-05-06 22:30

libxml2-python CVE-2017-0663 中危 2.9.1-6.el7_2.3 libxml2: Heap buffer overflow in xmlAddID

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-0663

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-14 13:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-15412 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15412

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-28 19:29 修改: 2024-11-21 03:14

libxml2-python CVE-2017-16931 中危 2.9.1-6.el7_2.3 libxml2: Mishandling parameter-entity references

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16931

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-23 21:29 修改: 2025-04-20 01:37

libxml2-python CVE-2017-16932 中危 2.9.1-6.el7_2.3 libxml2: Infinite recursion in parameter entities

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16932

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-23 21:29 修改: 2026-01-22 18:16

libxml2-python CVE-2017-7375 中危 2.9.1-6.el7_2.3 libxml2: Missing validation for external entities in xmlParsePEReference

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7375

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-19 19:29 修改: 2025-12-03 22:15

libxml2-python CVE-2017-9047 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9047

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-9049 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-9050 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictAddString

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9050

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2018-14404 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-19 13:29 修改: 2025-12-03 21:15

libxml2-python CVE-2019-19956 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19956

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-24 16:15 修改: 2025-12-03 19:15

libxml2-python CVE-2019-20388 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20388

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-21 23:15 修改: 2025-12-17 22:15

libxml2-python CVE-2020-24977 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24977

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-04 00:15 修改: 2024-11-21 05:16

libxml2-python CVE-2020-7595 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7595

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-21 23:15 修改: 2025-12-03 16:15

libxml2-python CVE-2021-3516 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3516

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-01 14:15 修改: 2024-11-21 06:21

libxml2-python CVE-2021-3517 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3517

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-19 14:15 修改: 2025-12-02 22:16

libxml2-python CVE-2021-3518 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3518

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-18 12:15 修改: 2024-11-21 06:21

libxml2-python CVE-2021-3537 中危 2.9.1-6.el7_2.3 libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3537

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-14 20:15 修改: 2024-11-21 06:21

libxml2-python CVE-2021-3541 中危 2.9.1-6.el7_2.3 libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3541

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-09 17:15 修改: 2024-11-21 06:21

libxml2-python CVE-2022-23308 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free of ID and IDREF attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23308

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-26 05:15 修改: 2025-05-05 17:17

libxml2-python CVE-2022-29824 中危 2.9.1-6.el7_2.3 libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29824

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-03 03:15 修改: 2024-11-21 06:59

libxml2-python CVE-2022-40303 中危 2.9.1-6.el7_2.3 libxml2: integer overflows with XML_PARSE_HUGE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40303

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-23 00:15 修改: 2025-04-29 05:15

libxml2-python CVE-2022-40304 中危 2.9.1-6.el7_2.3 libxml2: dict corruption caused by entity reference cycles

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40304

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-23 18:15 修改: 2025-04-28 20:15

libxml2-python CVE-2022-49043 中危 2.9.1-6.el7_2.3 libxml: use-after-free in xmlXIncludeAddNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-49043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-26 06:15 修改: 2025-11-03 21:15

libxml2-python CVE-2023-28484 中危 2.9.1-6.el7_2.3 libxml2: NULL dereference in xmlSchemaFixupComplexType

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28484

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-24 21:15 修改: 2025-05-30 20:15

libxml2-python CVE-2023-29469 中危 2.9.1-6.el7_2.3 libxml2: Hashing of empty dict strings isn't deterministic

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29469

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-24 21:15 修改: 2025-02-04 21:15

libxml2-python CVE-2023-39615 中危 2.9.1-6.el7_2.3 libxml2: crafted xml can cause global buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-29 17:15 修改: 2025-11-03 21:15

libxml2-python CVE-2024-25062 中危 2.9.1-6.el7_2.3 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-04 16:15 修改: 2025-11-03 22:16

libxml2-python CVE-2025-32414 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Out-of-Bounds Read in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32414

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-08 03:15 修改: 2025-11-03 20:18

libxml2-python CVE-2025-32415 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.13 libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32415

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-17 17:15 修改: 2025-11-03 20:18

libxml2-python CVE-2025-6021 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6021

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-12 13:15 修改: 2026-05-12 13:17

libxml2-python CVE-2025-9714 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.14 libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9714

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-10 19:15 修改: 2026-05-12 13:17

libxml2-python CVE-2026-0990 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2-python CVE-2026-1757 中危 2.9.1-6.el7_2.3 libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1757

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-02 13:15 修改: 2026-04-22 10:16

libxml2-python CVE-2026-6732 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-23 23:16 修改: 2026-05-15 14:36

lua CVE-2014-5461 中危 5.1.4-15.el7 lua: overflow flaw in vararg functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5461

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-09-04 17:55 修改: 2026-05-06 22:30

lua CVE-2021-43519 中危 5.1.4-15.el7 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43519

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-09 13:15 修改: 2024-11-21 06:29

ncurses CVE-2017-10684 中危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses CVE-2017-10685 中危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses CVE-2018-19217 中危 5.9-13.20130511.el7 ncurses: Null pointer dereference at function _nc_name_match

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses CVE-2019-17594 中危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses CVE-2019-17595 中危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses CVE-2023-29491 中危 5.9-13.20130511.el7 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-14 01:15 修改: 2025-11-04 19:15

ncurses-base CVE-2017-10684 中危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-10685 中危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-base CVE-2018-19217 中危 5.9-13.20130511.el7 ncurses: Null pointer dereference at function _nc_name_match

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-base CVE-2019-17594 中危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-base CVE-2019-17595 中危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-base CVE-2023-29491 中危 5.9-13.20130511.el7 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-14 01:15 修改: 2025-11-04 19:15

ncurses-libs CVE-2017-10684 中危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-10685 中危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2018-19217 中危 5.9-13.20130511.el7 ncurses: Null pointer dereference at function _nc_name_match

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-libs CVE-2019-17594 中危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-libs CVE-2019-17595 中危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-libs CVE-2023-29491 中危 5.9-13.20130511.el7 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-14 01:15 修改: 2025-11-04 19:15

cpio CVE-2023-7207 中危 2.11-24.el7 cpio: path traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7207

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-29 01:42 修改: 2025-08-26 17:19

nettle CVE-2018-16869 中危 2.7.1-8.el7 nettle: Leaky data conversion exposing a manager oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16869

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-12-03 14:29 修改: 2024-11-21 03:53

nettle CVE-2021-3580 中危 2.7.1-8.el7 nettle: Remote crash in RSA decryption via manipulated ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3580

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-08-05 21:15 修改: 2024-11-21 06:21

nspr CVE-2016-1951 中危 4.13.1-1.0.el7_3 nspr: Memory allocation issue related to PR_*printf functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1951

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-08-07 19:59 修改: 2026-05-06 22:30

nspr CVE-2018-0495 中危 4.13.1-1.0.el7_3 4.21.0-1.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nspr CVE-2018-12404 中危 4.13.1-1.0.el7_3 4.21.0-1.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nspr CVE-2019-11719 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nspr CVE-2019-11756 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nspr CVE-2019-17006 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nspr CVE-2019-17007 中危 4.13.1-1.0.el7_3 4.21.0-1.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nspr CVE-2020-12400 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nspr CVE-2020-12401 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nspr CVE-2020-12402 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nspr CVE-2020-12403 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nspr CVE-2020-6829 中危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

curl CVE-2015-3153 中危 7.29.0-42.el7 curl: sensitive HTTP server headers also sent to proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3153

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-05-01 15:59 修改: 2026-05-06 22:30

curl CVE-2016-8615 中危 7.29.0-42.el7 curl: Cookie injection for other servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8615

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2016-8617 中危 7.29.0-42.el7 curl: Out-of-bounds write via unchecked multiplication

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8617

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

curl CVE-2016-8618 中危 7.29.0-42.el7 curl: Double-free in curl_maprintf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8618

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

nss CVE-2015-2808 中危 3.28.4-8.el7 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

nss CVE-2016-2183 中危 3.28.4-8.el7 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

nss CVE-2016-9074 中危 3.28.4-8.el7 nss: Insufficient timing side-channel resistance in divSpoiler

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9074

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2025-11-25 17:50

nss CVE-2016-9574 中危 3.28.4-8.el7 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-19 13:29 修改: 2024-11-21 03:01

nss CVE-2018-0495 中危 3.28.4-8.el7 3.44.0-4.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss CVE-2018-12384 中危 3.28.4-8.el7 3.36.0-7.el7_5 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12384

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-04-29 15:29 修改: 2024-11-21 03:45

nss CVE-2018-12404 中危 3.28.4-8.el7 3.44.0-4.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss CVE-2018-18508 中危 3.28.4-8.el7 nss: NULL pointer dereference in several CMS functions resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 03:56

nss CVE-2019-11719 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss CVE-2019-11729 中危 3.28.4-8.el7 3.44.0-7.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss CVE-2019-11756 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss CVE-2019-17006 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss CVE-2019-17007 中危 3.28.4-8.el7 3.44.0-4.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss CVE-2020-12400 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss CVE-2020-12401 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss CVE-2020-12402 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss CVE-2020-12403 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss CVE-2020-25648 中危 3.28.4-8.el7 3.53.1-7.el7_9 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-20 22:15 修改: 2024-11-21 05:18

nss CVE-2020-6829 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

nss CVE-2023-5388 中危 3.28.4-8.el7 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-19 12:15 修改: 2025-11-04 19:16

nss CVE-2023-6135 中危 3.28.4-8.el7 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-19 14:15 修改: 2024-11-21 08:43

nss CVE-2024-6602 中危 3.28.4-8.el7 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-09 15:15 修改: 2025-11-03 23:17

nss-pem CVE-2018-1000007 中危 1.0.3-4.el7 1.0.3-5.el7 curl: HTTP authentication leak in redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-24 22:29 修改: 2024-11-21 03:39

nss-pem CVE-2018-1000120 中危 1.0.3-4.el7 1.0.3-5.el7 curl: FTP path trickery leads to NIL byte out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000120

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

nss-pem CVE-2018-1000122 中危 1.0.3-4.el7 1.0.3-5.el7 curl: RTSP RTP buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000122

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

nss-pem CVE-2018-1000301 中危 1.0.3-4.el7 1.0.3-5.el7 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000301

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-24 13:29 修改: 2026-04-15 21:16

curl CVE-2016-8619 中危 7.29.0-42.el7 curl: Double-free in krb5 code

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8619

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

nss-softokn CVE-2015-2613 中危 3.28.3-6.el7 JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2613

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-07-16 10:59 修改: 2026-05-06 22:30

nss-softokn CVE-2017-7781 中危 3.28.3-6.el7 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7781

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:32

nss-softokn CVE-2018-0495 中危 3.28.3-6.el7 3.44.0-5.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-softokn CVE-2018-12404 中危 3.28.3-6.el7 3.44.0-5.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-softokn CVE-2019-11719 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn CVE-2019-11729 中危 3.28.3-6.el7 3.44.0-8.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn CVE-2019-11756 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-softokn CVE-2019-17006 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn CVE-2019-17007 中危 3.28.3-6.el7 3.44.0-5.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn CVE-2020-12400 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-12401 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-12402 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-12403 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-6829 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

curl CVE-2016-8624 中危 7.29.0-42.el7 curl: Invalid URL parsing with '#'

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8624

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

nss-softokn-freebl CVE-2015-2613 中危 3.28.3-6.el7 JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2613

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-07-16 10:59 修改: 2026-05-06 22:30

nss-softokn-freebl CVE-2017-7781 中危 3.28.3-6.el7 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7781

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:32

nss-softokn-freebl CVE-2018-0495 中危 3.28.3-6.el7 3.44.0-5.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-softokn-freebl CVE-2018-12404 中危 3.28.3-6.el7 3.44.0-5.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-softokn-freebl CVE-2019-11719 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn-freebl CVE-2019-11729 中危 3.28.3-6.el7 3.44.0-8.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn-freebl CVE-2019-11756 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-softokn-freebl CVE-2019-17006 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn-freebl CVE-2019-17007 中危 3.28.3-6.el7 3.44.0-5.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn-freebl CVE-2020-12400 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-12401 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-12402 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-12403 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-6829 中危 3.28.3-6.el7 3.53.1-6.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

curl CVE-2016-8625 中危 7.29.0-42.el7 curl: IDNA 2003 makes curl use wrong host

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8625

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2017-1000254 中危 7.29.0-42.el7 curl: FTP PWD response parser out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000254

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-06 13:29 修改: 2026-05-13 00:24

curl CVE-2017-1000257 中危 7.29.0-42.el7 7.29.0-42.el7_4.1 curl: IMAP FETCH response out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000257

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-31 21:29 修改: 2026-04-15 21:16

curl CVE-2017-8817 中危 7.29.0-42.el7 curl: FTP wildcard out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8817

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-29 18:29 修改: 2026-04-15 21:16

nss-sysinit CVE-2015-2808 中危 3.28.4-8.el7 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

nss-sysinit CVE-2016-2183 中危 3.28.4-8.el7 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

nss-sysinit CVE-2016-9074 中危 3.28.4-8.el7 nss: Insufficient timing side-channel resistance in divSpoiler

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9074

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2025-11-25 17:50

nss-sysinit CVE-2016-9574 中危 3.28.4-8.el7 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-19 13:29 修改: 2024-11-21 03:01

nss-sysinit CVE-2018-0495 中危 3.28.4-8.el7 3.44.0-4.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-sysinit CVE-2018-12384 中危 3.28.4-8.el7 3.36.0-7.el7_5 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12384

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-04-29 15:29 修改: 2024-11-21 03:45

nss-sysinit CVE-2018-12404 中危 3.28.4-8.el7 3.44.0-4.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-sysinit CVE-2018-18508 中危 3.28.4-8.el7 nss: NULL pointer dereference in several CMS functions resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 03:56

nss-sysinit CVE-2019-11719 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-sysinit CVE-2019-11729 中危 3.28.4-8.el7 3.44.0-7.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-sysinit CVE-2019-11756 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-sysinit CVE-2019-17006 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-sysinit CVE-2019-17007 中危 3.28.4-8.el7 3.44.0-4.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-sysinit CVE-2020-12400 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-12401 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-12402 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-12403 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-25648 中危 3.28.4-8.el7 3.53.1-7.el7_9 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-20 22:15 修改: 2024-11-21 05:18

nss-sysinit CVE-2020-6829 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

nss-sysinit CVE-2023-5388 中危 3.28.4-8.el7 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-19 12:15 修改: 2025-11-04 19:16

nss-sysinit CVE-2023-6135 中危 3.28.4-8.el7 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-19 14:15 修改: 2024-11-21 08:43

nss-sysinit CVE-2024-6602 中危 3.28.4-8.el7 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-09 15:15 修改: 2025-11-03 23:17

curl CVE-2018-1000007 中危 7.29.0-42.el7 7.29.0-51.el7 curl: HTTP authentication leak in redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-24 22:29 修改: 2024-11-21 03:39

curl CVE-2018-1000120 中危 7.29.0-42.el7 7.29.0-51.el7 curl: FTP path trickery leads to NIL byte out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000120

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

curl CVE-2018-1000122 中危 7.29.0-42.el7 7.29.0-51.el7 curl: RTSP RTP buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000122

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

curl CVE-2018-1000301 中危 7.29.0-42.el7 7.29.0-51.el7 curl: Out-of-bounds heap read when missing RTSP headers allows information leak or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000301

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-24 13:29 修改: 2026-04-15 21:16

nss-tools CVE-2015-2808 中危 3.28.4-8.el7 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

nss-tools CVE-2016-2183 中危 3.28.4-8.el7 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

nss-tools CVE-2016-9074 中危 3.28.4-8.el7 nss: Insufficient timing side-channel resistance in divSpoiler

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9074

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2025-11-25 17:50

nss-tools CVE-2016-9574 中危 3.28.4-8.el7 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-19 13:29 修改: 2024-11-21 03:01

nss-tools CVE-2018-0495 中危 3.28.4-8.el7 3.44.0-4.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-tools CVE-2018-12384 中危 3.28.4-8.el7 3.36.0-7.el7_5 nss: ServerHello.random is all zeros when handling a v2-compatible ClientHello

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12384

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-04-29 15:29 修改: 2024-11-21 03:45

nss-tools CVE-2018-12404 中危 3.28.4-8.el7 3.44.0-4.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-tools CVE-2018-18508 中危 3.28.4-8.el7 nss: NULL pointer dereference in several CMS functions resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 03:56

nss-tools CVE-2019-11719 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-tools CVE-2019-11729 中危 3.28.4-8.el7 3.44.0-7.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-tools CVE-2019-11756 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-tools CVE-2019-17006 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-tools CVE-2019-17007 中危 3.28.4-8.el7 3.44.0-4.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-tools CVE-2020-12400 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-12401 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-12402 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-12403 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-25648 中危 3.28.4-8.el7 3.53.1-7.el7_9 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-20 22:15 修改: 2024-11-21 05:18

nss-tools CVE-2020-6829 中危 3.28.4-8.el7 3.53.1-3.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

nss-tools CVE-2023-5388 中危 3.28.4-8.el7 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-19 12:15 修改: 2025-11-04 19:16

nss-tools CVE-2023-6135 中危 3.28.4-8.el7 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-19 14:15 修改: 2024-11-21 08:43

nss-tools CVE-2024-6602 中危 3.28.4-8.el7 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-09 15:15 修改: 2025-11-03 23:17

curl CVE-2019-5482 中危 7.29.0-42.el7 7.29.0-59.el7 curl: heap buffer overflow in function tftp_receive_packet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5482

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-16 19:15 修改: 2026-04-15 21:17

nss-util CVE-2018-0495 中危 3.28.4-3.el7 3.44.0-3.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-util CVE-2018-12404 中危 3.28.4-3.el7 3.44.0-3.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-util CVE-2019-11719 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-util CVE-2019-11729 中危 3.28.4-3.el7 3.44.0-4.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-util CVE-2019-11756 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-util CVE-2019-17006 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-util CVE-2019-17007 中危 3.28.4-3.el7 3.44.0-3.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-util CVE-2020-12400 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-util CVE-2020-12401 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-util CVE-2020-12402 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-util CVE-2020-12403 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-util CVE-2020-6829 中危 3.28.4-3.el7 3.53.1-1.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

numpy CVE-2019-6446 中危 1:1.7.1-11.el7 numpy: crafted serialized object passed in numpy.load() in pickle python module allows arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6446

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-16 05:29 修改: 2025-07-21 23:15

numpy CVE-2021-41495 中危 1:1.7.1-11.el7 numpy: NULL pointer dereference in numpy.sort in in the PyArray_DescrNew() due to missing return-value validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41495

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-17 20:15 修改: 2024-11-21 06:26

numpy CVE-2021-41496 中危 1:1.7.1-11.el7 numpy: buffer overflow in the array_from_pyobj() in fortranobject.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41496

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-17 20:15 修改: 2024-11-21 06:26

openldap CVE-2019-13057 中危 2.4.44-5.el7 openldap: Information disclosure issue in slapd component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13057

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-26 13:15 修改: 2024-11-21 04:24

openldap CVE-2019-13565 中危 2.4.44-5.el7 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13565

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-26 13:15 修改: 2024-11-21 04:25

openldap CVE-2020-12243 中危 2.4.44-5.el7 2.4.44-22.el7 openldap: denial of service via nested boolean expressions in LDAP search filters

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12243

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-04-28 19:15 修改: 2024-11-21 04:59

openldap CVE-2020-25692 中危 2.4.44-5.el7 2.4.44-23.el7_9 openldap: NULL pointer dereference for unauthenticated packet in slapd

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25692

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-08 01:15 修改: 2024-11-21 05:18

openldap CVE-2020-25709 中危 2.4.44-5.el7 2.4.44-25.el7_9 openldap: assertion failure in Certificate List syntax validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25709

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-18 12:15 修改: 2024-11-21 05:18

openldap CVE-2020-25710 中危 2.4.44-5.el7 2.4.44-25.el7_9 openldap: assertion failure in CSN normalization with invalid input

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25710

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-28 11:15 修改: 2024-11-21 05:18

openldap CVE-2020-36221 中危 2.4.44-5.el7 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36222 中危 2.4.44-5.el7 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36223 中危 2.4.44-5.el7 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36224 中危 2.4.44-5.el7 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36225 中危 2.4.44-5.el7 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36226 中危 2.4.44-5.el7 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36227 中危 2.4.44-5.el7 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36228 中危 2.4.44-5.el7 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36229 中危 2.4.44-5.el7 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36230 中危 2.4.44-5.el7 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2021-27212 中危 2.4.44-5.el7 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-14 03:15 修改: 2024-11-21 05:57

openldap CVE-2022-29155 中危 2.4.44-5.el7 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-04 20:15 修改: 2024-11-21 06:58

openldap CVE-2026-22185 中危 2.4.44-5.el7 OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-07 21:16 修改: 2026-04-15 00:35

curl CVE-2020-8177 中危 7.29.0-42.el7 7.29.0-59.el7_9.1 curl: Incorrect argument check can allow remote servers to overwrite local files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8177

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2026-04-15 21:17

curl CVE-2020-8284 中危 7.29.0-42.el7 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

openssh CVE-2018-15919 中危 7.4p1-13.el7_4 openssh: User enumeration via malformed packets in authentication requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-08-28 08:29 修改: 2025-12-18 12:15

openssh CVE-2018-20685 中危 7.4p1-13.el7_4 openssh: scp client improper directory name validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20685

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-10 21:29 修改: 2025-12-17 22:15

openssh CVE-2019-6110 中危 7.4p1-13.el7_4 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-31 18:29 修改: 2025-12-18 15:15

openssh CVE-2019-6111 中危 7.4p1-13.el7_4 openssh: Improper validation of object names allows malicious server to overwrite files via scp client

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6111

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-31 18:29 修改: 2025-12-18 15:15

openssh CVE-2020-14145 中危 7.4p1-13.el7_4 openssh: Observable discrepancy leading to an information leak in the algorithm negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-29 18:15 修改: 2025-12-18 15:15

openssh CVE-2020-15778 中危 7.4p1-13.el7_4 openssh: scp allows command injection when using backtick characters in the destination argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-07-24 14:15 修改: 2025-07-28 18:12

openssh CVE-2021-41617 中危 7.4p1-13.el7_4 7.4p1-22.el7_9 openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-09-26 19:15 修改: 2026-05-12 10:16

openssh CVE-2023-48795 中危 7.4p1-13.el7_4 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-12-18 16:15 修改: 2026-05-12 11:16

openssh CVE-2023-51385 中危 7.4p1-13.el7_4 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-12-18 19:15 修改: 2026-05-12 12:16

openssh CVE-2023-51767 中危 7.4p1-13.el7_4 openssh: authentication bypass via row hammer attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51767

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-12-24 07:15 修改: 2026-06-02 16:16

openssh CVE-2025-26465 中危 7.4p1-13.el7_4 openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26465

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-02-18 19:15 修改: 2026-05-12 13:16

openssh CVE-2025-32728 中危 7.4p1-13.el7_4 openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32728

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-04-10 02:15 修改: 2025-05-22 16:51

openssh CVE-2025-61984 中危 7.4p1-13.el7_4 openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61984

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-10-06 19:15 修改: 2026-04-15 00:35

openssh CVE-2025-61985 中危 7.4p1-13.el7_4 openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61985

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-10-06 19:15 修改: 2026-04-15 00:35

openssh CVE-2026-35414 中危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35414

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 18:16 修改: 2026-04-10 19:36

curl CVE-2020-8285 中危 7.29.0-42.el7 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

curl CVE-2021-22876 中危 7.29.0-42.el7 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-01 18:15 修改: 2025-06-09 15:15

openssh-clients CVE-2018-15919 中危 7.4p1-13.el7_4 openssh: User enumeration via malformed packets in authentication requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-08-28 08:29 修改: 2025-12-18 12:15

openssh-clients CVE-2018-20685 中危 7.4p1-13.el7_4 openssh: scp client improper directory name validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20685

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-10 21:29 修改: 2025-12-17 22:15

openssh-clients CVE-2019-6110 中危 7.4p1-13.el7_4 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-31 18:29 修改: 2025-12-18 15:15

openssh-clients CVE-2019-6111 中危 7.4p1-13.el7_4 openssh: Improper validation of object names allows malicious server to overwrite files via scp client

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6111

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-31 18:29 修改: 2025-12-18 15:15

openssh-clients CVE-2020-14145 中危 7.4p1-13.el7_4 openssh: Observable discrepancy leading to an information leak in the algorithm negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-29 18:15 修改: 2025-12-18 15:15

openssh-clients CVE-2020-15778 中危 7.4p1-13.el7_4 openssh: scp allows command injection when using backtick characters in the destination argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-07-24 14:15 修改: 2025-07-28 18:12

openssh-clients CVE-2021-41617 中危 7.4p1-13.el7_4 7.4p1-22.el7_9 openssh: privilege escalation when AuthorizedKeysCommand or AuthorizedPrincipalsCommand are configured

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41617

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-09-26 19:15 修改: 2026-05-12 10:16

openssh-clients CVE-2023-48795 中危 7.4p1-13.el7_4 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-12-18 16:15 修改: 2026-05-12 11:16

openssh-clients CVE-2023-51385 中危 7.4p1-13.el7_4 openssh: potential command injection via shell metacharacters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51385

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-12-18 19:15 修改: 2026-05-12 12:16

openssh-clients CVE-2023-51767 中危 7.4p1-13.el7_4 openssh: authentication bypass via row hammer attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51767

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-12-24 07:15 修改: 2026-06-02 16:16

openssh-clients CVE-2025-26465 中危 7.4p1-13.el7_4 openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26465

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-02-18 19:15 修改: 2026-05-12 13:16

openssh-clients CVE-2025-32728 中危 7.4p1-13.el7_4 openssh: OpenSSH SSHD Agent Forwarding and X11 Forwarding

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32728

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-04-10 02:15 修改: 2025-05-22 16:51

openssh-clients CVE-2025-61984 中危 7.4p1-13.el7_4 openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61984

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-10-06 19:15 修改: 2026-04-15 00:35

openssh-clients CVE-2025-61985 中危 7.4p1-13.el7_4 openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61985

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-10-06 19:15 修改: 2026-04-15 00:35

openssh-clients CVE-2026-35414 中危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Security bypass via mishandling of authorized_keys principals option

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35414

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 18:16 修改: 2026-04-10 19:36

curl CVE-2021-22924 中危 7.29.0-42.el7 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-05 21:15 修改: 2025-06-09 15:15

curl CVE-2021-22946 中危 7.29.0-42.el7 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

curl CVE-2021-22947 中危 7.29.0-42.el7 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

curl CVE-2022-27774 中危 7.29.0-42.el7 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

openssl-libs CVE-2015-2808 中危 1:1.0.2k-8.el7 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

openssl-libs CVE-2017-3736 中危 1:1.0.2k-8.el7 1:1.0.2k-12.el7 openssl: bn_sqrx8x_internal carry bug on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3736

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-02 17:29 修改: 2025-04-20 01:37

openssl-libs CVE-2017-3737 中危 1:1.0.2k-8.el7 1:1.0.2k-12.el7 openssl: Read/write after SSL object in error state

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3737

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-07 16:29 修改: 2025-04-20 01:37

openssl-libs CVE-2018-0495 中危 1:1.0.2k-8.el7 1:1.0.2k-16.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

openssl-libs CVE-2018-0732 中危 1:1.0.2k-8.el7 1:1.0.2k-16.el7 openssl: Malicious server can send large prime to client during DH(E) TLS handshake causing the client to hang

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0732

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-12 13:29 修改: 2024-11-21 03:38

openssl-libs CVE-2018-0739 中危 1:1.0.2k-8.el7 1:1.0.2k-16.el7 openssl: Handling of crafted recursive ASN.1 structures can cause a stack overflow and resulting denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0739

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-27 21:29 修改: 2024-11-21 03:38

openssl-libs CVE-2018-5407 中危 1:1.0.2k-8.el7 1:1.0.2k-16.el7_6.1 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5407

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-11-15 21:29 修改: 2024-11-21 04:08

openssl-libs CVE-2019-1547 中危 1:1.0.2k-8.el7 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-10 17:15 修改: 2024-11-21 04:36

openssl-libs CVE-2019-1559 中危 1:1.0.2k-8.el7 1:1.0.2k-19.el7 openssl: 0-byte record padding oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1559

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-27 23:29 修改: 2024-11-21 04:36

openssl-libs CVE-2021-23840 中危 1:1.0.2k-8.el7 1:1.0.2k-22.el7_9 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-16 17:15 修改: 2026-04-16 15:16

openssl-libs CVE-2021-23841 中危 1:1.0.2k-8.el7 1:1.0.2k-22.el7_9 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51

openssl-libs CVE-2021-3712 中危 1:1.0.2k-8.el7 1:1.0.2k-23.el7_9 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-24 15:15 修改: 2026-04-16 15:16

openssl-libs CVE-2022-1292 中危 1:1.0.2k-8.el7 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-03 16:15 修改: 2025-08-13 14:15

openssl-libs CVE-2022-2068 中危 1:1.0.2k-8.el7 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-21 15:15 修改: 2025-11-03 22:15

openssl-libs CVE-2022-4304 中危 1:1.0.2k-8.el7 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-08 20:15 修改: 2025-11-04 20:16

openssl-libs CVE-2023-0215 中危 1:1.0.2k-8.el7 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-08 20:15 修改: 2025-11-04 20:16

openssl-libs CVE-2023-0466 中危 1:1.0.2k-8.el7 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-28 15:15 修改: 2025-02-19 18:15

openssl-libs CVE-2023-2650 中危 1:1.0.2k-8.el7 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-30 14:15 修改: 2025-03-19 16:15

openssl-libs CVE-2024-6119 中危 1:1.0.2k-8.el7 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-09-03 16:15 修改: 2026-05-12 12:17

openssl-libs CVE-2025-9230 中危 1:1.0.2k-8.el7 1:1.0.2k-26.el7_9.1 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-30 14:15 修改: 2026-06-02 14:16

openssl-libs CVE-2026-28390 中危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

p11-kit CVE-2020-29361 中危 0.23.5-3.el7 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

p11-kit CVE-2020-29362 中危 0.23.5-3.el7 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

p11-kit-trust CVE-2020-29361 中危 0.23.5-3.el7 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

p11-kit-trust CVE-2020-29362 中危 0.23.5-3.el7 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

curl CVE-2022-27776 中危 7.29.0-42.el7 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

curl CVE-2022-27778 中危 7.29.0-42.el7 curl: removes wrong file on error

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27778

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

pam CVE-2024-10041 中危 1.1.8-18.el7 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15

pam CVE-2024-22365 中危 1.1.8-18.el7 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-06 08:15 修改: 2026-05-12 12:16

pcre CVE-2017-6004 中危 8.32-17.el7 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6004

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-16 11:59 修改: 2026-05-13 00:24

pcre CVE-2017-7186 中危 8.32-17.el7 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7186

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-20 00:59 修改: 2026-05-13 00:24

curl CVE-2022-27779 中危 7.29.0-42.el7 curl: cookie for trailing dot TLD

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27779

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

curl CVE-2022-27780 中危 7.29.0-42.el7 curl: percent-encoded path separator in URL host

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27780

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

perl CVE-2015-8853 中危 4:5.16.3-292.el7 perl: regexp matching hangs indefinitely on illegal UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8853

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-05-25 15:59 修改: 2026-05-06 22:30

perl CVE-2016-1238 中危 4:5.16.3-292.el7 perl: loading of modules from current directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1238

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl CVE-2016-2381 中危 4:5.16.3-292.el7 perl: ambiguous environment variables handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2381

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-04-08 15:59 修改: 2026-05-06 22:30

perl CVE-2016-6185 中危 4:5.16.3-292.el7 perl: XSLoader loads relative paths not included in @INC

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6185

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl CVE-2020-10543 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:55

perl CVE-2020-10878 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:56

perl CVE-2020-12723 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 15:15 修改: 2024-11-21 05:00

perl CVE-2020-16156 中危 4:5.16.3-292.el7 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-13 18:15 修改: 2025-11-03 22:15

perl CVE-2023-31484 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9.1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-29 00:15 修改: 2025-11-03 22:16

perl CVE-2025-40909 中危 4:5.16.3-292.el7 perl: Perl threads have a working directory race condition where file operations may target unintended paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-05-30 13:15 修改: 2026-04-18 15:16

perl CVE-2026-45190 中危 4:5.16.3-292.el7 Net::CIDR::Lite: perl: Net::CIDR::Lite: IP ACL bypass due to improper input validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45190

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-10 21:16 修改: 2026-05-12 16:48

perl CVE-2026-6659 中危 4:5.16.3-292.el7 Crypt::PasswdMD5: Perl: Crypt::PasswdMD5: Weak cryptographic salts due to predictable random number generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6659

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-08 18:16 修改: 2026-05-26 23:16

curl CVE-2022-27782 中危 7.29.0-42.el7 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

curl CVE-2022-30115 中危 7.29.0-42.el7 curl: HSTS bypass via trailing dot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30115

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2024-11-21 07:02

curl CVE-2022-32208 中危 7.29.0-42.el7 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-07 13:15 修改: 2025-05-05 17:18

curl CVE-2022-43551 中危 7.29.0-42.el7 curl: HSTS bypass via IDN

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-12-23 15:15 修改: 2026-02-13 20:16

curl CVE-2023-27535 中危 7.29.0-42.el7 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

curl CVE-2023-27536 中危 7.29.0-42.el7 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-02-14 16:15

curl CVE-2023-27538 中危 7.29.0-42.el7 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

curl CVE-2023-28321 中危 7.29.0-42.el7 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-26 21:15 修改: 2025-01-15 16:15

curl CVE-2024-2398 中危 7.29.0-42.el7 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-27 08:15 修改: 2025-07-30 19:42

curl CVE-2025-13034 中危 7.29.0-42.el7 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:54

curl CVE-2025-14017 中危 7.29.0-42.el7 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-27 21:29

perl-Git CVE-2017-14867 中危 1.8.3.1-12.el7_4 git: cvsserver command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14867

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-09-29 01:34 修改: 2026-05-13 00:24

perl-Git CVE-2018-1000021 中危 1.8.3.1-12.el7_4 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-02-09 23:29 修改: 2024-11-21 03:39

perl-Git CVE-2019-1348 中危 1.8.3.1-12.el7_4 git: Arbitrary path overwriting via export-marks in-stream command feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1348

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-01-24 22:15 修改: 2024-11-21 04:36

perl-Git CVE-2019-1349 中危 1.8.3.1-12.el7_4 git: Recursive submodule cloning allows using git directory twice with synonymous directory name written in .git/

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1349

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-01-24 21:15 修改: 2024-11-21 04:36

perl-Git CVE-2021-21300 中危 1.8.3.1-12.el7_4 git: remote code execution during clone operation on case-insensitive filesystems

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21300

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-03-09 20:15 修改: 2024-11-21 05:47

perl-Git CVE-2021-40330 中危 1.8.3.1-12.el7_4 git: unexpected cross-protocol requests via a repository path containing a newline character

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40330

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-08-31 04:15 修改: 2024-11-21 06:23

perl-Git CVE-2022-24765 中危 1.8.3.1-12.el7_4 git: On multi-user machines Git users might find themselves unexpectedly in a Git worktree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24765

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-04-12 18:15 修改: 2024-11-21 06:51

perl-Git CVE-2022-39253 中危 1.8.3.1-12.el7_4 git: exposure of sensitive information to a malicious actor

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39253

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-10-19 11:15 修改: 2024-11-21 07:17

perl-Git CVE-2022-39260 中危 1.8.3.1-12.el7_4 git: git shell function that splits command arguments can lead to arbitrary heap writes.

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-39260

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-10-19 12:15 修改: 2024-11-21 07:17

perl-Git CVE-2023-22490 中危 1.8.3.1-12.el7_4 git: data exfiltration with maliciously crafted repository

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22490

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-02-14 20:15 修改: 2024-11-21 07:44

perl-Git CVE-2023-23946 中危 1.8.3.1-12.el7_4 git: git apply: a path outside the working tree can be overwritten with crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23946

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-02-14 20:15 修改: 2024-11-21 07:47

perl-Git CVE-2024-32465 中危 1.8.3.1-12.el7_4 git: additional local RCE

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32465

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 20:15 修改: 2026-01-05 19:15

perl-Git CVE-2024-52005 中危 1.8.3.1-12.el7_4 git: The sideband payload is passed unfiltered to the terminal in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-15 18:15 修改: 2025-12-18 16:00

perl-Git CVE-2025-27613 中危 1.8.3.1-12.el7_4 gitk: Git file creation flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27613

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 15:15 修改: 2026-04-15 00:35

perl-Git CVE-2025-27614 中危 1.8.3.1-12.el7_4 gitk: git script execution flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27614

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 15:15 修改: 2026-04-15 00:35

perl-Git CVE-2025-48386 中危 1.8.3.1-12.el7_4 git: Git buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48386

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-08 19:15 修改: 2026-04-15 00:35

perl-HTTP-Tiny CVE-2023-31486 中危 0.033-3.el7 http-tiny: perl: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-29 00:15 修改: 2025-01-30 20:15

curl CVE-2025-9086 中危 7.29.0-42.el7 curl: libcurl: Curl out of bounds read for cookie path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-12 06:15 修改: 2026-06-02 14:16

curl CVE-2026-1965 中危 7.29.0-42.el7 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:15 修改: 2026-03-12 14:11

perl-Pod-Escapes CVE-2015-8853 中危 1:1.04-292.el7 perl: regexp matching hangs indefinitely on illegal UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8853

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-05-25 15:59 修改: 2026-05-06 22:30

perl-Pod-Escapes CVE-2016-1238 中危 1:1.04-292.el7 perl: loading of modules from current directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1238

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl-Pod-Escapes CVE-2016-2381 中危 1:1.04-292.el7 perl: ambiguous environment variables handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2381

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-04-08 15:59 修改: 2026-05-06 22:30

perl-Pod-Escapes CVE-2016-6185 中危 1:1.04-292.el7 perl: XSLoader loads relative paths not included in @INC

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6185

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl-Pod-Escapes CVE-2020-10543 中危 1:1.04-292.el7 1:1.04-299.el7_9 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:55

perl-Pod-Escapes CVE-2020-10878 中危 1:1.04-292.el7 1:1.04-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:56

perl-Pod-Escapes CVE-2020-12723 中危 1:1.04-292.el7 1:1.04-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 15:15 修改: 2024-11-21 05:00

perl-Pod-Escapes CVE-2020-16156 中危 1:1.04-292.el7 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-13 18:15 修改: 2025-11-03 22:15

perl-Pod-Escapes CVE-2023-31484 中危 1:1.04-292.el7 1:1.04-299.el7_9.1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-29 00:15 修改: 2025-11-03 22:16

perl-Pod-Escapes CVE-2025-40909 中危 1:1.04-292.el7 perl: Perl threads have a working directory race condition where file operations may target unintended paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-05-30 13:15 修改: 2026-04-18 15:16

perl-Pod-Escapes CVE-2026-45190 中危 1:1.04-292.el7 Net::CIDR::Lite: perl: Net::CIDR::Lite: IP ACL bypass due to improper input validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45190

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-10 21:16 修改: 2026-05-12 16:48

perl-Pod-Escapes CVE-2026-6659 中危 1:1.04-292.el7 Crypt::PasswdMD5: Perl: Crypt::PasswdMD5: Weak cryptographic salts due to predictable random number generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6659

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-08 18:16 修改: 2026-05-26 23:16

perl-Storable CVE-2017-20230 中危 2.45-3.el7 perl-Storable: Storable for Perl: Denial of service via stack overflow in retrieve_hook function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-20230

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-21 16:16 修改: 2026-04-22 17:36

curl CVE-2026-3783 中危 7.29.0-42.el7 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:10

curl CVE-2026-3784 中危 7.29.0-42.el7 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:16 修改: 2026-06-02 14:16

perl-libs CVE-2015-8853 中危 4:5.16.3-292.el7 perl: regexp matching hangs indefinitely on illegal UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8853

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-05-25 15:59 修改: 2026-05-06 22:30

perl-libs CVE-2016-1238 中危 4:5.16.3-292.el7 perl: loading of modules from current directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1238

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl-libs CVE-2016-2381 中危 4:5.16.3-292.el7 perl: ambiguous environment variables handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2381

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-04-08 15:59 修改: 2026-05-06 22:30

perl-libs CVE-2016-6185 中危 4:5.16.3-292.el7 perl: XSLoader loads relative paths not included in @INC

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6185

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl-libs CVE-2020-10543 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:55

perl-libs CVE-2020-10878 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:56

perl-libs CVE-2020-12723 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 15:15 修改: 2024-11-21 05:00

perl-libs CVE-2020-16156 中危 4:5.16.3-292.el7 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-13 18:15 修改: 2025-11-03 22:15

perl-libs CVE-2023-31484 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9.1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-29 00:15 修改: 2025-11-03 22:16

perl-libs CVE-2025-40909 中危 4:5.16.3-292.el7 perl: Perl threads have a working directory race condition where file operations may target unintended paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-05-30 13:15 修改: 2026-04-18 15:16

perl-libs CVE-2026-45190 中危 4:5.16.3-292.el7 Net::CIDR::Lite: perl: Net::CIDR::Lite: IP ACL bypass due to improper input validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45190

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-10 21:16 修改: 2026-05-12 16:48

perl-libs CVE-2026-6659 中危 4:5.16.3-292.el7 Crypt::PasswdMD5: Perl: Crypt::PasswdMD5: Weak cryptographic salts due to predictable random number generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6659

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-08 18:16 修改: 2026-05-26 23:16

curl CVE-2026-3805 中危 7.29.0-42.el7 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:08

curl CVE-2026-4873 中危 7.29.0-42.el7 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:45

perl-macros CVE-2015-8853 中危 4:5.16.3-292.el7 perl: regexp matching hangs indefinitely on illegal UTF-8 input

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8853

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-05-25 15:59 修改: 2026-05-06 22:30

perl-macros CVE-2016-1238 中危 4:5.16.3-292.el7 perl: loading of modules from current directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1238

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl-macros CVE-2016-2381 中危 4:5.16.3-292.el7 perl: ambiguous environment variables handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2381

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-04-08 15:59 修改: 2026-05-06 22:30

perl-macros CVE-2016-6185 中危 4:5.16.3-292.el7 perl: XSLoader loads relative paths not included in @INC

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6185

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2016-08-02 14:59 修改: 2026-05-06 22:30

perl-macros CVE-2020-10543 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: heap-based buffer overflow in regular expression compiler leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10543

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:55

perl-macros CVE-2020-10878 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to integer overflow leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10878

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 14:15 修改: 2024-11-21 04:56

perl-macros CVE-2020-12723 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9 perl: corruption of intermediate language state of compiled regular expression due to recursive S_study_chunk() calls leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12723

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-06-05 15:15 修改: 2024-11-21 05:00

perl-macros CVE-2020-16156 中危 4:5.16.3-292.el7 perl-CPAN: Bypass of verification of signatures in CHECKSUMS files

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2021-12-13 18:15 修改: 2025-11-03 22:15

perl-macros CVE-2023-31484 中危 4:5.16.3-292.el7 4:5.16.3-299.el7_9.1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-29 00:15 修改: 2025-11-03 22:16

perl-macros CVE-2025-40909 中危 4:5.16.3-292.el7 perl: Perl threads have a working directory race condition where file operations may target unintended paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-05-30 13:15 修改: 2026-04-18 15:16

perl-macros CVE-2026-45190 中危 4:5.16.3-292.el7 Net::CIDR::Lite: perl: Net::CIDR::Lite: IP ACL bypass due to improper input validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45190

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-10 21:16 修改: 2026-05-12 16:48

perl-macros CVE-2026-6659 中危 4:5.16.3-292.el7 Crypt::PasswdMD5: Perl: Crypt::PasswdMD5: Weak cryptographic salts due to predictable random number generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6659

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-08 18:16 修改: 2026-05-26 23:16

curl CVE-2026-5545 中危 7.29.0-42.el7 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:31

procps-ng CVE-2018-1122 中危 3.3.10-16.el7 3.3.10-26.el7 procps: Local privilege escalation in top

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1122

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-23 14:29 修改: 2024-11-21 03:59

procps-ng CVE-2018-1126 中危 3.3.10-16.el7 3.3.10-17.el7_5.2 procps: incorrect integer size in proc/alloc.* leading to truncation / integer overflow issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1126

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-23 13:29 修改: 2024-11-21 03:59

curl CVE-2026-5773 中危 7.29.0-42.el7 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:13

curl CVE-2026-6253 中危 7.29.0-42.el7 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:40

curl CVE-2026-6429 中危 7.29.0-42.el7 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:18

curl CVE-2026-7168 中危 7.29.0-42.el7 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:12

avahi-libs CVE-2023-1981 中危 0.6.31-17.el7 avahi: avahi-daemon can be crashed via DBus

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1981

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-05-26 18:15 修改: 2025-11-03 22:16

cyrus-sasl CVE-2019-19906 中危 2.1.26-21.el7 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-12-19 18:15 修改: 2024-11-21 04:35

avahi-libs CVE-2023-38469 中危 0.6.31-17.el7 avahi: Reachable assertion in avahi_dns_packet_append_record

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38469

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-11-02 15:15 修改: 2025-11-03 22:16

python CVE-2007-4559 中危 2.7.5-58.el7 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

python CVE-2013-1664 中危 2.7.5-58.el7 bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1664

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python CVE-2013-1665 中危 2.7.5-58.el7 bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1665

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python CVE-2013-7040 中危 2.7.5-58.el7 python: hash secret can be recovered remotely

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7040

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-05-19 14:55 修改: 2026-05-06 22:30

python CVE-2016-2183 中危 2.7.5-58.el7 2.7.5-69.el7_5 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

python CVE-2017-1000158 中危 2.7.5-58.el7 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000158

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-17 05:29 修改: 2025-04-20 01:37

python CVE-2018-1061 中危 2.7.5-58.el7 2.7.5-76.el7 python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1061

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-19 12:29 修改: 2024-11-21 03:59

python CVE-2018-14647 中危 2.7.5-58.el7 2.7.5-86.el7 python: Missing salt initialization in _elementtree.c module

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14647

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-25 00:29 修改: 2024-11-21 03:49

python CVE-2018-20852 中危 2.7.5-58.el7 2.7.5-88.el7 python: Cookie domain check returns incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20852

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-13 21:15 修改: 2024-11-21 04:02

python CVE-2019-16056 中危 2.7.5-58.el7 2.7.5-88.el7 python: email.utils.parseaddr wrongly parses email addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16056

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-06 18:15 修改: 2024-11-21 04:29

python CVE-2019-16935 中危 2.7.5-58.el7 2.7.5-89.el7 python: XSS vulnerability in the documentation XML-RPC server in server_title field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16935

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-28 02:15 修改: 2024-11-21 04:31

python CVE-2019-18348 中危 2.7.5-58.el7 python: CRLF injection via the host part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18348

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-23 17:15 修改: 2024-11-21 04:33

python CVE-2019-20907 中危 2.7.5-58.el7 2.7.5-90.el7 python: infinite loop in the tarfile module via crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20907

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-13 13:15 修改: 2024-11-21 04:39

python CVE-2019-5010 中危 2.7.5-58.el7 2.7.5-86.el7 python: NULL pointer dereference using a specially crafted X509 certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5010

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-31 21:15 修改: 2024-11-21 04:44

python CVE-2019-9740 中危 2.7.5-58.el7 2.7.5-86.el7 python: CRLF injection via the query part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9740

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-13 03:29 修改: 2024-11-21 04:52

python CVE-2019-9947 中危 2.7.5-58.el7 2.7.5-86.el7 python: CRLF injection via the path part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9947

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python CVE-2019-9948 中危 2.7.5-58.el7 2.7.5-86.el7 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9948

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python CVE-2020-10735 中危 2.7.5-58.el7 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-09 14:15 修改: 2025-11-03 22:15

python CVE-2020-26116 中危 2.7.5-58.el7 2.7.5-92.el7_9 python: CRLF injection via HTTP request method in httplib/http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26116

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-27 04:15 修改: 2024-11-21 05:19

python CVE-2020-26137 中危 2.7.5-58.el7 2.7.5-92.el7_9 python-urllib3: CRLF injection via HTTP request method

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26137

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-30 18:15 修改: 2024-11-21 05:19

python CVE-2020-27619 中危 2.7.5-58.el7 python: Unsafe use of eval() on data retrieved via HTTP in the test suite

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 03:16 修改: 2024-11-21 05:21

python CVE-2020-8492 中危 2.7.5-58.el7 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8492

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-30 19:15 修改: 2024-11-21 05:38

python CVE-2021-23336 中危 2.7.5-58.el7 python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23336

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-15 13:15 修改: 2025-12-17 22:15

python CVE-2021-3177 中危 2.7.5-58.el7 2.7.5-92.el7_9 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-19 06:15 修改: 2025-12-18 15:15

python CVE-2021-3733 中危 2.7.5-58.el7 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-10 17:42 修改: 2025-11-03 22:15

python CVE-2021-4189 中危 2.7.5-58.el7 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-24 16:15 修改: 2025-12-17 22:15

python CVE-2022-0391 中危 2.7.5-58.el7 python: urllib.parse does not sanitize URLs containing ASCII newline and tabs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-09 23:15 修改: 2025-12-17 21:15

python CVE-2022-45061 中危 2.7.5-58.el7 python: CPU denial of service via inefficient IDNA decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-09 07:15 修改: 2025-11-03 22:16

python CVE-2022-48560 中危 2.7.5-58.el7 python: use after free in heappushpop() of heapq module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48560

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python CVE-2022-48565 中危 2.7.5-58.el7 python: XML External Entity in XML processing plistlib module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48565

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python CVE-2022-48566 中危 2.7.5-58.el7 python: constant-time-defeating optimisations issue in the compare_digest function in Lib/hmac.p

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48566

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python CVE-2023-27043 中危 2.7.5-58.el7 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-19 00:15 修改: 2026-05-12 11:16

python CVE-2024-0450 中危 2.7.5-58.el7 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-19 16:15 修改: 2026-04-15 00:35

python CVE-2024-6232 中危 2.7.5-58.el7 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-09-03 13:15 修改: 2025-11-03 23:17

python CVE-2024-6923 中危 2.7.5-58.el7 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-01 14:15 修改: 2026-04-15 00:35

python CVE-2024-8088 中危 2.7.5-58.el7 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-22 19:15 修改: 2026-04-15 00:35

python CVE-2024-9287 中危 2.7.5-58.el7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-10-22 17:15 修改: 2025-11-03 23:17

python CVE-2025-0938 中危 2.7.5-58.el7 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-31 18:15 修改: 2026-04-15 00:35

python CVE-2025-11468 中危 2.7.5-58.el7 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-12084 中危 2.7.5-58.el7 2.7.5-94.el7_9.2 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-03 19:15 修改: 2026-01-26 15:16

python CVE-2025-12781 中危 2.7.5-58.el7 cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-21 20:16 修改: 2026-02-02 17:25

python CVE-2025-13837 中危 2.7.5-58.el7 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-01 18:16 修改: 2026-03-03 15:16

python CVE-2025-15282 中危 2.7.5-58.el7 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-15366 中危 2.7.5-58.el7 2.7.5-94.el7_9.3 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-15367 中危 2.7.5-58.el7 2.7.5-94.el7_9.3 cpython: POP3 command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-4516 中危 2.7.5-58.el7 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-15 14:15 修改: 2026-04-15 00:35

python CVE-2025-6069 中危 2.7.5-58.el7 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-17 14:15 修改: 2026-04-15 00:35

python CVE-2025-8291 中危 2.7.5-58.el7 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-07 18:16 修改: 2026-04-15 00:35

python CVE-2026-0672 中危 2.7.5-58.el7 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2026-0865 中危 2.7.5-58.el7 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2026-1502 中危 2.7.5-58.el7 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-10 18:16 修改: 2026-06-04 15:16

python CVE-2026-3276 中危 2.7.5-58.el7 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-06-03 16:16 修改: 2026-06-04 18:16

python CVE-2026-3644 中危 2.7.5-58.el7 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:30

python CVE-2026-4224 中危 2.7.5-58.el7 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:33

python CVE-2026-42308 中危 2.7.5-58.el7 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-09 06:16 修改: 2026-05-12 17:57

python CVE-2026-5713 中危 2.7.5-58.el7 python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-14 16:16 修改: 2026-06-10 19:16

python CVE-2026-6019 中危 2.7.5-58.el7 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-22 20:16 修改: 2026-05-28 19:15

python CVE-2026-7210 中危 2.7.5-58.el7 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-11 18:16 修改: 2026-06-10 19:16

cyrus-sasl-gssapi CVE-2019-19906 中危 2.1.26-21.el7 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-12-19 18:15 修改: 2024-11-21 04:35

avahi-libs CVE-2023-38470 中危 0.6.31-17.el7 avahi: Reachable assertion in avahi_escape_label

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38470

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-11-02 15:15 修改: 2025-11-03 22:16

cyrus-sasl-lib CVE-2019-19906 中危 2.1.26-21.el7 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-19 18:15 修改: 2024-11-21 04:35

avahi-libs CVE-2023-38471 中危 0.6.31-17.el7 avahi: Reachable assertion in dbus_set_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38471

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-11-02 15:15 修改: 2025-11-03 22:16

dbus CVE-2014-3477 中危 1:1.6.12-17.el7 dbus: denial of service flaw in dbus-daemon

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3477

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-07-01 17:55 修改: 2026-05-06 22:30

dbus CVE-2014-3532 中危 1:1.6.12-17.el7 dbus: denial of service in file descriptor passing feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3532

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

dbus CVE-2014-3533 中危 1:1.6.12-17.el7 dbus: denial of service when forwarding invalid file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3533

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

python-libs CVE-2007-4559 中危 2.7.5-58.el7 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

python-libs CVE-2013-1664 中危 2.7.5-58.el7 bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1664

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python-libs CVE-2013-1665 中危 2.7.5-58.el7 bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1665

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python-libs CVE-2013-7040 中危 2.7.5-58.el7 python: hash secret can be recovered remotely

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7040

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-05-19 14:55 修改: 2026-05-06 22:30

python-libs CVE-2016-2183 中危 2.7.5-58.el7 2.7.5-69.el7_5 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

python-libs CVE-2017-1000158 中危 2.7.5-58.el7 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000158

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-17 05:29 修改: 2025-04-20 01:37

python-libs CVE-2018-1061 中危 2.7.5-58.el7 2.7.5-76.el7 python: DOS via regular expression backtracking in difflib.IS_LINE_JUNK method in difflib

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1061

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-19 12:29 修改: 2024-11-21 03:59

python-libs CVE-2018-14647 中危 2.7.5-58.el7 2.7.5-86.el7 python: Missing salt initialization in _elementtree.c module

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14647

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-25 00:29 修改: 2024-11-21 03:49

python-libs CVE-2018-20852 中危 2.7.5-58.el7 2.7.5-88.el7 python: Cookie domain check returns incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20852

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-13 21:15 修改: 2024-11-21 04:02

python-libs CVE-2019-16056 中危 2.7.5-58.el7 2.7.5-88.el7 python: email.utils.parseaddr wrongly parses email addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16056

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-06 18:15 修改: 2024-11-21 04:29

python-libs CVE-2019-16935 中危 2.7.5-58.el7 2.7.5-89.el7 python: XSS vulnerability in the documentation XML-RPC server in server_title field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16935

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-28 02:15 修改: 2024-11-21 04:31

python-libs CVE-2019-18348 中危 2.7.5-58.el7 python: CRLF injection via the host part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18348

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-23 17:15 修改: 2024-11-21 04:33

python-libs CVE-2019-20907 中危 2.7.5-58.el7 2.7.5-90.el7 python: infinite loop in the tarfile module via crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20907

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-13 13:15 修改: 2024-11-21 04:39

python-libs CVE-2019-5010 中危 2.7.5-58.el7 2.7.5-86.el7 python: NULL pointer dereference using a specially crafted X509 certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5010

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-31 21:15 修改: 2024-11-21 04:44

python-libs CVE-2019-9740 中危 2.7.5-58.el7 2.7.5-86.el7 python: CRLF injection via the query part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9740

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-13 03:29 修改: 2024-11-21 04:52

python-libs CVE-2019-9947 中危 2.7.5-58.el7 2.7.5-86.el7 python: CRLF injection via the path part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9947

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python-libs CVE-2019-9948 中危 2.7.5-58.el7 2.7.5-86.el7 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9948

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python-libs CVE-2020-10735 中危 2.7.5-58.el7 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-09 14:15 修改: 2025-11-03 22:15

python-libs CVE-2020-26116 中危 2.7.5-58.el7 2.7.5-92.el7_9 python: CRLF injection via HTTP request method in httplib/http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26116

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-27 04:15 修改: 2024-11-21 05:19

python-libs CVE-2020-26137 中危 2.7.5-58.el7 2.7.5-92.el7_9 python-urllib3: CRLF injection via HTTP request method

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26137

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-30 18:15 修改: 2024-11-21 05:19

python-libs CVE-2020-27619 中危 2.7.5-58.el7 python: Unsafe use of eval() on data retrieved via HTTP in the test suite

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-10-22 03:16 修改: 2024-11-21 05:21

python-libs CVE-2020-8492 中危 2.7.5-58.el7 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8492

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-30 19:15 修改: 2024-11-21 05:38

python-libs CVE-2021-23336 中危 2.7.5-58.el7 python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23336

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-15 13:15 修改: 2025-12-17 22:15

python-libs CVE-2021-3177 中危 2.7.5-58.el7 2.7.5-92.el7_9 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-19 06:15 修改: 2025-12-18 15:15

python-libs CVE-2021-3733 中危 2.7.5-58.el7 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-10 17:42 修改: 2025-11-03 22:15

python-libs CVE-2021-4189 中危 2.7.5-58.el7 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-24 16:15 修改: 2025-12-17 22:15

python-libs CVE-2022-0391 中危 2.7.5-58.el7 python: urllib.parse does not sanitize URLs containing ASCII newline and tabs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-09 23:15 修改: 2025-12-17 21:15

python-libs CVE-2022-45061 中危 2.7.5-58.el7 python: CPU denial of service via inefficient IDNA decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-09 07:15 修改: 2025-11-03 22:16

python-libs CVE-2022-48560 中危 2.7.5-58.el7 python: use after free in heappushpop() of heapq module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48560

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python-libs CVE-2022-48565 中危 2.7.5-58.el7 python: XML External Entity in XML processing plistlib module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48565

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python-libs CVE-2022-48566 中危 2.7.5-58.el7 python: constant-time-defeating optimisations issue in the compare_digest function in Lib/hmac.p

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48566

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python-libs CVE-2023-27043 中危 2.7.5-58.el7 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-19 00:15 修改: 2026-05-12 11:16

python-libs CVE-2024-0450 中危 2.7.5-58.el7 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-19 16:15 修改: 2026-04-15 00:35

python-libs CVE-2024-6232 中危 2.7.5-58.el7 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-09-03 13:15 修改: 2025-11-03 23:17

python-libs CVE-2024-6923 中危 2.7.5-58.el7 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-01 14:15 修改: 2026-04-15 00:35

python-libs CVE-2024-8088 中危 2.7.5-58.el7 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-22 19:15 修改: 2026-04-15 00:35

python-libs CVE-2024-9287 中危 2.7.5-58.el7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-10-22 17:15 修改: 2025-11-03 23:17

python-libs CVE-2025-0938 中危 2.7.5-58.el7 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-31 18:15 修改: 2026-04-15 00:35

python-libs CVE-2025-11468 中危 2.7.5-58.el7 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-12084 中危 2.7.5-58.el7 2.7.5-94.el7_9.2 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-03 19:15 修改: 2026-01-26 15:16

python-libs CVE-2025-12781 中危 2.7.5-58.el7 cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-21 20:16 修改: 2026-02-02 17:25

python-libs CVE-2025-13837 中危 2.7.5-58.el7 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-01 18:16 修改: 2026-03-03 15:16

python-libs CVE-2025-15282 中危 2.7.5-58.el7 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-15366 中危 2.7.5-58.el7 2.7.5-94.el7_9.3 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-15367 中危 2.7.5-58.el7 2.7.5-94.el7_9.3 cpython: POP3 command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-4516 中危 2.7.5-58.el7 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-15 14:15 修改: 2026-04-15 00:35

python-libs CVE-2025-6069 中危 2.7.5-58.el7 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-17 14:15 修改: 2026-04-15 00:35

python-libs CVE-2025-8291 中危 2.7.5-58.el7 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-07 18:16 修改: 2026-04-15 00:35

python-libs CVE-2026-0672 中危 2.7.5-58.el7 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2026-0865 中危 2.7.5-58.el7 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2026-1502 中危 2.7.5-58.el7 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-10 18:16 修改: 2026-06-04 15:16

python-libs CVE-2026-3276 中危 2.7.5-58.el7 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-06-03 16:16 修改: 2026-06-04 18:16

python-libs CVE-2026-3644 中危 2.7.5-58.el7 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:30

python-libs CVE-2026-4224 中危 2.7.5-58.el7 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:33

python-libs CVE-2026-42308 中危 2.7.5-58.el7 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-09 06:16 修改: 2026-05-12 17:57

python-libs CVE-2026-5713 中危 2.7.5-58.el7 python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-14 16:16 修改: 2026-06-10 19:16

python-libs CVE-2026-6019 中危 2.7.5-58.el7 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-22 20:16 修改: 2026-05-28 19:15

python-libs CVE-2026-7210 中危 2.7.5-58.el7 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-11 18:16 修改: 2026-06-10 19:16

dbus CVE-2019-12749 中危 1:1.6.12-17.el7 1:1.10.24-15.el7 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-11 17:29 修改: 2026-02-13 20:16

python-setuptools CVE-2022-40897 中危 0.9.8-7.el7 pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-12-23 00:15 修改: 2025-11-04 16:15

python-setuptools CVE-2025-47273 中危 0.9.8-7.el7 0.9.8-7.el7_9.2 setuptools: Path Traversal Vulnerability in setuptools PackageIndex

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-05-17 16:15 修改: 2025-06-12 16:29

dbus CVE-2022-42010 中危 1:1.6.12-17.el7 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

qemu-guest-agent CVE-2014-3672 中危 10:2.8.0-2.el7 xen: Unrestricted qemu logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3672

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-05-25 15:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2014-9718 中危 10:2.8.0-2.el7 Qemu: PRDT overflow from guest to host

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9718

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-04-21 16:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2015-4037 中危 10:2.8.0-2.el7 qemu: insecure temporary file use in /net/slirp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-4037

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-08-26 19:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2015-5239 中危 10:2.8.0-2.el7 qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5239

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-23 20:15 修改: 2024-11-21 02:32

qemu-guest-agent CVE-2015-5278 中危 10:2.8.0-2.el7 qemu: Infinite loop in ne2000_receive() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5278

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-23 20:15 修改: 2024-11-21 02:32

qemu-guest-agent CVE-2015-7295 中危 10:2.8.0-2.el7 Qemu: net: virtio-net possible remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-7295

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2015-8345 中危 10:2.8.0-2.el7 Qemu: net: eepro100: infinite loop in processing command block list

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8345

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-13 17:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2015-8504 中危 10:2.8.0-2.el7 Qemu: ui: vnc: avoid floating point exception

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8504

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-11 19:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2016-4001 中危 10:2.8.0-2.el7 Qemu: net: buffer overflow in stellaris_enet emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4001

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-05-23 19:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-4002 中危 10:2.8.0-2.el7 Qemu: net: buffer overflow in MIPSnet emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4002

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-04-26 14:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-4454 中危 10:2.8.0-2.el7 Qemu: display: vmsvga: out-of-bounds read in vmsvga_fifo_read_raw() routine

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4454

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-01 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-6835 中危 10:2.8.0-2.el7 Qemu: net: vmxnet: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6835

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-10 00:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-7423 中危 10:2.8.0-2.el7 Qemu: scsi: mptsas: OOB access when freeing MPTSASRequest object

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7423

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-10-10 16:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2018-10839 中危 10:2.8.0-2.el7 QEMU: ne2000: integer overflow leads to buffer overflow issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10839

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-16 14:29 修改: 2024-11-21 03:42

qemu-guest-agent CVE-2018-17958 中危 10:2.8.0-2.el7 QEMU: rtl8139: integer overflow leads to buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17958

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-09 22:29 修改: 2026-04-28 16:16

qemu-guest-agent CVE-2018-17963 中危 10:2.8.0-2.el7 QEMU: net: ignore packets with large size

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17963

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-09 22:29 修改: 2024-11-21 03:55

qemu-guest-agent CVE-2019-15890 中危 10:2.8.0-2.el7 QEMU: Slirp: use-after-free during packet reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15890

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-06 17:15 修改: 2024-11-21 04:29

qemu-guest-agent CVE-2021-3682 中危 10:2.8.0-2.el7 QEMU: usbredir: free() call on invalid pointer in bufp_alloc()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3682

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-05 20:15 修改: 2024-11-21 06:22

qemu-guest-agent CVE-2021-3748 中危 10:2.8.0-2.el7 QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3748

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-23 20:15 修改: 2024-11-21 06:22

qemu-guest-agent CVE-2021-3750 中危 10:2.8.0-2.el7 QEMU: hcd-ehci: DMA reentrancy issue leads to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3750

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-02 19:15 修改: 2024-11-21 06:22

qemu-guest-agent CVE-2021-4206 中危 10:2.8.0-2.el7 QEMU: QXL: integer overflow in cursor_alloc() can lead to heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4206

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-04-29 17:15 修改: 2025-03-21 18:15

qemu-guest-agent CVE-2021-4207 中危 10:2.8.0-2.el7 QEMU: QXL: double fetch in qxl_cursor() can lead to heap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4207

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-04-29 17:15 修改: 2025-03-21 18:15

qemu-guest-agent CVE-2022-26353 中危 10:2.8.0-2.el7 QEMU: virtio-net: map leaking on error during receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26353

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-16 15:15 修改: 2024-11-21 06:53

qemu-guest-agent CVE-2022-4144 中危 10:2.8.0-2.el7 QEMU: QXL: qxl_phys2virt unsafe address translation can lead to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4144

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-29 18:15 修改: 2025-04-14 18:15

qemu-guest-agent CVE-2023-3019 中危 10:2.8.0-2.el7 QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3019

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-07-24 16:15 修改: 2026-05-12 10:16

qemu-guest-agent CVE-2023-3301 中危 10:2.8.0-2.el7 QEMU: net: triggerable assertion due to race condition in hot-unplug

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3301

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-13 17:15 修改: 2024-11-21 08:16

qemu-guest-agent CVE-2023-5088 中危 10:2.8.0-2.el7 QEMU: improper IDE controller reset can lead to MBR overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5088

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-03 14:15 修改: 2025-11-03 20:16

qemu-guest-agent CVE-2023-6693 中危 10:2.8.0-2.el7 QEMU: virtio-net: stack buffer overflow in virtio_net_flush_tx()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6693

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-01-02 10:15 修改: 2025-11-03 20:16

qemu-guest-agent CVE-2024-3446 中危 10:2.8.0-2.el7 QEMU: virtio: DMA reentrancy issue leads to double free vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3446

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-04-09 20:15 修改: 2026-04-15 00:35

qemu-guest-agent CVE-2024-4693 中危 10:2.8.0-2.el7 qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4693

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-14 15:44 修改: 2026-04-15 00:35

qemu-guest-agent CVE-2024-6505 中危 10:2.8.0-2.el7 qemu-kvm: virtio-net: queue index out-of-bounds access in software RSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6505

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-05 14:15 修改: 2024-11-21 09:49

qemu-guest-agent CVE-2024-7409 中危 10:2.8.0-2.el7 QEMU: Denial of Service via Improper Synchronization in QEMU NBD Server During Socket Closure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7409

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-05 14:15 修改: 2026-04-15 00:35

rpm CVE-2017-7500 中危 4.11.3-25.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm CVE-2017-7501 中危 4.11.3-25.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm CVE-2021-20271 中危 4.11.3-25.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm CVE-2021-3421 中危 4.11.3-25.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm CVE-2021-3521 中危 4.11.3-25.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm CVE-2021-35937 中危 4.11.3-25.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm CVE-2021-35938 中危 4.11.3-25.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm CVE-2021-35939 中危 4.11.3-25.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm CVE-2026-44604 中危 4.11.3-25.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

rpm-build-libs CVE-2017-7500 中危 4.11.3-25.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm-build-libs CVE-2017-7501 中危 4.11.3-25.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm-build-libs CVE-2021-20271 中危 4.11.3-25.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm-build-libs CVE-2021-3421 中危 4.11.3-25.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm-build-libs CVE-2021-3521 中危 4.11.3-25.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm-build-libs CVE-2021-35937 中危 4.11.3-25.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-build-libs CVE-2021-35938 中危 4.11.3-25.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-build-libs CVE-2021-35939 中危 4.11.3-25.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm-build-libs CVE-2026-44604 中危 4.11.3-25.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

rpm-libs CVE-2017-7500 中危 4.11.3-25.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm-libs CVE-2017-7501 中危 4.11.3-25.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm-libs CVE-2021-20271 中危 4.11.3-25.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm-libs CVE-2021-3421 中危 4.11.3-25.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm-libs CVE-2021-3521 中危 4.11.3-25.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm-libs CVE-2021-35937 中危 4.11.3-25.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-libs CVE-2021-35938 中危 4.11.3-25.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-libs CVE-2021-35939 中危 4.11.3-25.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm-libs CVE-2026-44604 中危 4.11.3-25.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

rpm-python CVE-2017-7500 中危 4.11.3-25.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm-python CVE-2017-7501 中危 4.11.3-25.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm-python CVE-2021-20271 中危 4.11.3-25.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm-python CVE-2021-3421 中危 4.11.3-25.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm-python CVE-2021-3521 中危 4.11.3-25.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm-python CVE-2021-35937 中危 4.11.3-25.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-python CVE-2021-35938 中危 4.11.3-25.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-python CVE-2021-35939 中危 4.11.3-25.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm-python CVE-2026-44604 中危 4.11.3-25.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

dbus CVE-2022-42011 中危 1:1.6.12-17.el7 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus CVE-2022-42012 中危 1:1.6.12-17.el7 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus CVE-2023-34969 中危 1:1.6.12-17.el7 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-08 03:15 修改: 2025-06-09 15:15

avahi-libs CVE-2023-38472 中危 0.6.31-17.el7 avahi: Reachable assertion in avahi_rdata_parse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38472

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-11-02 15:15 修改: 2025-11-03 22:16

dbus-libs CVE-2014-3477 中危 1:1.6.12-17.el7 dbus: denial of service flaw in dbus-daemon

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3477

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-07-01 17:55 修改: 2026-05-06 22:30

rsync CVE-2014-9512 中危 3.0.9-18.el7 rsync: Transferring file outside destination path via just-sent symlink

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9512

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-02-12 16:59 修改: 2026-05-06 22:30

rsync CVE-2017-15994 中危 3.0.9-18.el7 rsync: Mishandles archaic checksums

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15994

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-10-29 06:29 修改: 2025-04-20 01:37

rsync CVE-2017-16548 中危 3.0.9-18.el7 rsync: Heap-based buffer over-read in receive_xattr function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16548

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-11-06 05:29 修改: 2025-04-20 01:37

rsync CVE-2017-17433 中危 3.0.9-18.el7 rsync: recv_files function metadata handling allows for access restriction bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17433

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-12-06 03:29 修改: 2025-04-20 01:37

rsync CVE-2017-17434 中危 3.0.9-18.el7 rsync: daemon does not check for fnamecmp filenames allowing for access restriction bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17434

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-12-06 03:29 修改: 2025-04-20 01:37

rsync CVE-2018-5764 中危 3.0.9-18.el7 rsync: sanitization bypass in parse_argument in options.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5764

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-01-17 22:29 修改: 2024-11-21 04:09

rsync CVE-2024-12086 中危 3.0.9-18.el7 rsync: rsync server leaks arbitrary client files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12086

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 18:15 修改: 2026-05-26 07:16

rsync CVE-2024-12087 中危 3.0.9-18.el7 3.1.2-12.el7_9.2 rsync: Path traversal vulnerability in rsync

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12087

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 18:15 修改: 2026-04-14 22:16

rsync CVE-2024-12088 中危 3.0.9-18.el7 rsync: --safe-links option bypass leads to path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12088

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 18:15 修改: 2026-04-14 22:16

rsync CVE-2024-12747 中危 3.0.9-18.el7 rsync: Race Condition in rsync Handling Symbolic Links

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12747

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 18:15 修改: 2026-04-15 00:35

rsync CVE-2025-10158 中危 3.0.9-18.el7 rsync: Rsync: Out of bounds array access via negative index

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-10158

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-11-18 15:16 修改: 2026-04-15 00:35

rsync CVE-2026-43617 中危 3.0.9-18.el7 rsync: rsync: Hostname-based ACL bypass in daemon chroot configuration

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43617

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-20 02:16 修改: 2026-05-21 20:54

rsync CVE-2026-43619 中危 3.0.9-18.el7 rsync: rsync: Symlink race vulnerability allows unauthorized file operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43619

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-20 02:16 修改: 2026-05-21 20:42

rsync CVE-2026-43620 中危 3.0.9-18.el7 rsync: rsync: Remote Denial of Service via Out-of-bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-43620

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-20 02:16 修改: 2026-05-21 20:47

rsync CVE-2026-45232 中危 3.0.9-18.el7 rsync: Rsync: Denial of Service via malformed HTTP proxy response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45232

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-05-20 02:16 修改: 2026-05-21 20:52

sed CVE-2026-5958 中危 4.2.2-5.el7 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-20 12:16 修改: 2026-05-19 15:17

shared-mime-info CVE-2019-3820 中危 1.8-3.el7 1.8-5.el7 gnome-shell: partial lock screen bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3820

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-06 20:29 修改: 2024-11-21 04:42

dbus-libs CVE-2014-3532 中危 1:1.6.12-17.el7 dbus: denial of service in file descriptor passing feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3532

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3533 中危 1:1.6.12-17.el7 dbus: denial of service when forwarding invalid file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3533

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

sqlite CVE-2015-7036 中危 3.7.17-8.el7 sqlite: arbitrary code execution on databases with malformed schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-7036

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-22 03:59 修改: 2026-05-06 22:30

sqlite CVE-2017-7000 中危 3.7.17-8.el7 chromium-browser: pointer disclosure in sqlite

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7000

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-03 06:29 修改: 2024-11-21 03:30

sqlite CVE-2019-13751 中危 3.7.17-8.el7 sqlite: fts3: improve detection of corrupted records

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13751

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2019-13752 中危 3.7.17-8.el7 sqlite: fts3: improve shadow table corruption detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13752

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2019-13753 中危 3.7.17-8.el7 sqlite: fts3: incorrectly removed corruption check

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13753

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2019-19603 中危 3.7.17-8.el7 sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19603

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-09 19:15 修改: 2024-11-21 04:35

sqlite CVE-2019-19645 中危 3.7.17-8.el7 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-09 16:15 修改: 2024-11-21 04:35

sqlite CVE-2019-19880 中危 3.7.17-8.el7 sqlite: invalid pointer dereference in exprListAppendList in window.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19880

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-18 06:15 修改: 2024-11-21 04:35

sqlite CVE-2019-19924 中危 3.7.17-8.el7 sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19924

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-24 16:15 修改: 2024-11-21 04:35

sqlite CVE-2019-20218 中危 3.7.17-8.el7 sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-02 14:16 修改: 2024-11-21 04:38

sqlite CVE-2019-5827 中危 3.7.17-8.el7 sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5827

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-27 17:15 修改: 2024-11-21 04:45

sqlite CVE-2019-8457 中危 3.7.17-8.el7 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-30 16:29 修改: 2024-11-21 04:49

sqlite CVE-2020-13435 中危 3.7.17-8.el7 sqlite: NULL pointer dereference in sqlite3ExprCodeTarget()

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13435

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-05-24 22:15 修改: 2024-11-21 05:01

sqlite CVE-2020-13631 中危 3.7.17-8.el7 sqlite: Virtual table can be renamed into the name of one of its shadow tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-05-27 15:15 修改: 2024-11-21 05:01

sqlite CVE-2020-24736 中危 3.7.17-8.el7 sqlite: Crash due to misuse of window functions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24736

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-04-11 18:15 修改: 2025-02-11 18:15

sqlite CVE-2020-35527 中危 3.7.17-8.el7 sqlite: Out of bounds access during table rename

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35527

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-01 18:15 修改: 2024-11-21 05:27

sqlite CVE-2022-35737 中危 3.7.17-8.el7 sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-03 06:15 修改: 2026-02-13 20:16

sqlite CVE-2025-29087 中危 3.7.17-8.el7 sqlite: Integer Overflow in SQLite concat_ws Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29087

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-07 20:15 修改: 2025-04-30 12:43

sqlite CVE-2025-29088 中危 3.7.17-8.el7 sqlite: Denial of Service in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29088

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-10 14:15 修改: 2025-09-30 16:59

dbus-libs CVE-2019-12749 中危 1:1.6.12-17.el7 1:1.10.24-15.el7 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-11 17:29 修改: 2026-02-13 20:16

dbus-libs CVE-2022-42010 中危 1:1.6.12-17.el7 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus-libs CVE-2022-42011 中危 1:1.6.12-17.el7 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus-libs CVE-2022-42012 中危 1:1.6.12-17.el7 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus-libs CVE-2023-34969 中危 1:1.6.12-17.el7 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-08 03:15 修改: 2025-06-09 15:15

systemd CVE-2013-4392 中危 219-42.el7 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13

systemd CVE-2017-18078 中危 219-42.el7 systemd: Unsafe handling of hard links allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-29 05:29 修改: 2024-11-21 03:19

systemd CVE-2018-1049 中危 219-42.el7 219-42.el7_4.7 systemd: automount: access to automounted volumes can lock up

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-16 21:29 修改: 2024-11-21 03:59

systemd CVE-2018-15686 中危 219-42.el7 219-67.el7 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd CVE-2018-16866 中危 219-42.el7 219-67.el7 systemd: out-of-bounds read when parsing a crafted syslog message

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16866

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-11 19:29 修改: 2024-11-21 03:53

systemd CVE-2018-6954 中危 219-42.el7 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-13 20:29 修改: 2025-06-09 16:15

systemd CVE-2019-3842 中危 219-42.el7 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-04-09 21:29 修改: 2024-11-21 04:42

systemd CVE-2020-13529 中危 219-42.el7 systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-10 16:15 修改: 2024-11-21 05:01

systemd CVE-2020-13776 中危 219-42.el7 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13776

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-06-03 03:15 修改: 2025-06-09 16:15

systemd CVE-2021-3997 中危 219-42.el7 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23

systemd CVE-2022-3821 中危 219-42.el7 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-08 22:15 修改: 2025-05-02 18:15

systemd CVE-2022-4415 中危 219-42.el7 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-11 15:15 修改: 2025-11-03 20:15

systemd CVE-2022-45873 中危 219-42.el7 systemd: deadlock in systemd-coredump via a crash with a long backtrace

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45873

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-23 23:15 修改: 2025-04-25 19:15

systemd CVE-2023-26604 中危 219-42.el7 219-78.el7_9.11 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-03 16:15 修改: 2025-06-20 19:17

systemd CVE-2025-4598 中危 219-42.el7 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-30 14:15 修改: 2026-05-19 16:16

systemd CVE-2026-4105 中危 219-42.el7 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-13 19:55 修改: 2026-04-30 17:16

avahi-libs CVE-2023-38473 中危 0.6.31-17.el7 avahi: Reachable assertion in avahi_alternative_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38473

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-11-02 16:15 修改: 2025-11-03 22:16

avahi-libs CVE-2024-52615 中危 0.6.31-17.el7 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-11-21 21:15 修改: 2026-04-15 00:35

dracut CVE-2016-4484 中危 033-502.el7 dracut: Brute force attack on LUKS password decryption via initramfs

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4484

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-01-23 21:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2021-33294 中危 0.168-8.el7 elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-07-18 14:15 修改: 2024-11-21 06:08

elfutils-libelf CVE-2021-33294 中危 0.168-8.el7 elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-07-18 14:15 修改: 2024-11-21 06:08

systemd-libs CVE-2013-4392 中危 219-42.el7 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13

systemd-libs CVE-2017-18078 中危 219-42.el7 systemd: Unsafe handling of hard links allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-29 05:29 修改: 2024-11-21 03:19

systemd-libs CVE-2018-1049 中危 219-42.el7 219-42.el7_4.7 systemd: automount: access to automounted volumes can lock up

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-16 21:29 修改: 2024-11-21 03:59

systemd-libs CVE-2018-15686 中危 219-42.el7 219-67.el7 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd-libs CVE-2018-16866 中危 219-42.el7 219-67.el7 systemd: out-of-bounds read when parsing a crafted syslog message

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16866

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-11 19:29 修改: 2024-11-21 03:53

systemd-libs CVE-2018-6954 中危 219-42.el7 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-13 20:29 修改: 2025-06-09 16:15

systemd-libs CVE-2019-3842 中危 219-42.el7 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-04-09 21:29 修改: 2024-11-21 04:42

systemd-libs CVE-2020-13529 中危 219-42.el7 systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-10 16:15 修改: 2024-11-21 05:01

systemd-libs CVE-2020-13776 中危 219-42.el7 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13776

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-06-03 03:15 修改: 2025-06-09 16:15

systemd-libs CVE-2021-3997 中危 219-42.el7 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23

systemd-libs CVE-2022-3821 中危 219-42.el7 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-08 22:15 修改: 2025-05-02 18:15

systemd-libs CVE-2022-4415 中危 219-42.el7 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-11 15:15 修改: 2025-11-03 20:15

systemd-libs CVE-2022-45873 中危 219-42.el7 systemd: deadlock in systemd-coredump via a crash with a long backtrace

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45873

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-11-23 23:15 修改: 2025-04-25 19:15

systemd-libs CVE-2023-26604 中危 219-42.el7 219-78.el7_9.11 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-03 16:15 修改: 2025-06-20 19:17

systemd-libs CVE-2025-4598 中危 219-42.el7 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-05-30 14:15 修改: 2026-05-19 16:16

systemd-libs CVE-2026-4105 中危 219-42.el7 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-13 19:55 修改: 2026-04-30 17:16

tar CVE-2005-2541 中危 2:1.26-32.el7 tar: does not properly warn the user when extracting setuid or setgid files

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27

tar CVE-2016-6321 中危 2:1.26-32.el7 tar: Bypassing the extract path name

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6321

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-09 22:59 修改: 2026-05-06 22:30

tar CVE-2022-48303 中危 2:1.26-32.el7 tar: heap buffer overflow at from_header() in list.c via specially crafted checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-30 04:15 修改: 2025-03-27 21:15

tar CVE-2025-45582 中危 2:1.26-32.el7 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-11 17:15 修改: 2025-11-02 01:15

tar CVE-2025-64118 中危 2:1.26-32.el7 node-tar: tar: node-tar: Information disclosure via reading a truncated tar file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64118

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-30 18:15 修改: 2026-04-15 00:35

tar CVE-2026-33056 中危 2:1.26-32.el7 tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33056

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-20 08:16 修改: 2026-03-24 16:17

tar CVE-2026-5704 中危 2:1.26-32.el7 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-06 16:16 修改: 2026-04-22 20:08

trousers CVE-2020-24331 中危 0.3.14-2.el7 trousers: tss user still has read and write access to the /etc/tcsd.conf file if tcsd is started as root

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24331

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-08-13 17:15 修改: 2024-11-21 05:14

trousers CVE-2020-24332 中危 0.3.14-2.el7 trousers: tss user can be used to create or corrupt existing files, this could lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24332

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-08-13 17:15 修改: 2024-11-21 05:14

util-linux CVE-2014-9114 中危 2.23.2-43.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

util-linux CVE-2016-2779 中危 2.23.2-43.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

util-linux CVE-2020-21583 中危 2.23.2-43.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

util-linux CVE-2022-0563 中危 2.23.2-43.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

util-linux CVE-2025-14104 中危 2.23.2-43.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

elfutils-libs CVE-2021-33294 中危 0.168-8.el7 elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-07-18 14:15 修改: 2024-11-21 06:08

avahi-libs CVE-2024-52616 中危 0.6.31-17.el7 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-11-21 21:15 修改: 2026-04-15 00:35

avahi-libs CVE-2025-59529 中危 0.6.31-17.el7 avahi: simple clients denial-of-service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-12-18 21:15 修改: 2026-01-16 16:50

vim-minimal CVE-2019-20807 中危 2:7.4.160-2.el7 vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20807

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-05-28 14:15 修改: 2024-11-21 04:39

vim-minimal CVE-2021-3778 中危 2:7.4.160-2.el7 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3778

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-15 08:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3796 中危 2:7.4.160-2.el7 vim: use-after-free in nv_replace() in normal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3796

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-15 13:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3872 中危 2:7.4.160-2.el7 vim: heap-based buffer overflow in win_redr_status() in drawscreen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3872

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-10-19 13:15 修改: 2025-11-03 21:15

vim-minimal CVE-2021-3984 中危 2:7.4.160-2.el7 vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3984

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-01 11:15 修改: 2024-11-21 06:23

vim-minimal CVE-2021-4019 中危 2:7.4.160-2.el7 vim: heap-based buffer overflow in find_help_tags() in help.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4019

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-01 10:15 修改: 2026-05-29 20:09

vim-minimal CVE-2021-4192 中危 2:7.4.160-2.el7 vim: use-after-free in win_linetabsize()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4192

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-31 15:15 修改: 2024-11-21 06:37

vim-minimal CVE-2021-4193 中危 2:7.4.160-2.el7 vim: out-of-bound read in getvcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4193

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-31 16:15 修改: 2024-11-21 06:37

vim-minimal CVE-2022-0359 中危 2:7.4.160-2.el7 vim: Heap-based buffer overflow in init_ccline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0359

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-26 12:15 修改: 2025-11-03 21:15

vim-minimal CVE-2022-1621 中危 2:7.4.160-2.el7 vim: heap buffer overflow in vim_strncpy

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1621

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-10 14:15 修改: 2024-11-21 06:41

vim-minimal CVE-2022-1629 中危 2:7.4.160-2.el7 vim: buffer over-read in function find_next_quote

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1629

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-10 14:15 修改: 2024-11-21 06:41

vim-minimal CVE-2024-43790 中危 2:7.4.160-2.el7 vim: Out of bounds read when performing a search command

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43790

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-22 22:15 修改: 2025-08-18 17:08

vim-minimal CVE-2025-29768 中危 2:7.4.160-2.el7 vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29768

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-03-13 17:15 修改: 2025-08-18 14:14

vim-minimal CVE-2025-53905 中危 2:7.4.160-2.el7 vim: Vim path traversial

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53905

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-15 21:15 修改: 2025-11-04 22:16

vim-minimal CVE-2025-53906 中危 2:7.4.160-2.el7 vim: Vim path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53906

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-15 21:15 修改: 2026-04-01 19:16

vim-minimal CVE-2025-9390 中危 2:7.4.160-2.el7 vim: vim xxd xxd.c main buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9390

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-08-24 14:15 修改: 2026-04-29 01:00

vim-minimal CVE-2026-25749 中危 2:7.4.160-2.el7 2:7.4.629-8.el7_9.1 vim: Vim: Arbitrary code execution via 'helpfile' option processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25749

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-06 23:15 修改: 2026-06-09 18:28

vim-minimal CVE-2026-28417 中危 2:7.4.160-2.el7 2:7.4.629-8.el7_9.1 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28417

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-27 22:16 修改: 2026-03-03 17:50

vim-minimal CVE-2026-28418 中危 2:7.4.160-2.el7 vim: Vim: Information disclosure via heap-based buffer overflow in Emacs-style tags file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28418

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-27 22:16 修改: 2026-03-03 17:49

vim-minimal CVE-2026-28419 中危 2:7.4.160-2.el7 vim: Vim: Information disclosure and denial of service via malformed tags file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28419

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-27 22:16 修改: 2026-03-04 21:22

vim-minimal CVE-2026-28420 中危 2:7.4.160-2.el7 vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28420

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-27 22:16 修改: 2026-03-04 20:47

vim-minimal CVE-2026-28421 中危 2:7.4.160-2.el7 2:7.4.629-8.el7_9.1 vim: Vim: Denial of service and information disclosure via crafted swap file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-27 22:16 修改: 2026-03-04 20:47

vim-minimal CVE-2026-35177 中危 2:7.4.160-2.el7 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-06 18:16 修改: 2026-04-20 18:28

vim-minimal CVE-2026-39881 中危 2:7.4.160-2.el7 vim: Vim: Arbitrary code execution via command injection in NetBeans interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39881

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-08 21:17 修改: 2026-04-22 16:50

vim-minimal CVE-2026-41411 中危 2:7.4.160-2.el7 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-24 17:16 修改: 2026-04-27 13:39

vim-minimal CVE-2026-44656 中危 2:7.4.160-2.el7 vim: Vim: Arbitrary command execution via :find command-line completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44656

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-08 23:16 修改: 2026-05-14 13:59

vim-minimal CVE-2026-45130 中危 2:7.4.160-2.el7 vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45130

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-08 23:16 修改: 2026-06-09 18:28

vim-minimal CVE-2026-46483 中危 2:7.4.160-2.el7 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-15 15:16 修改: 2026-05-19 12:27

avahi-libs CVE-2025-68276 中危 0.6.31-17.el7 avahi: Avahi: Denial of Service via D-Bus record browsers with AVAHI_LOOKUP_USE_WIDE_AREA flag

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68276

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-01-12 18:15 修改: 2026-01-16 16:51

xz CVE-2026-34743 中危 5.2.2-1.el7 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-02 19:21 修改: 2026-04-15 17:33

avahi-libs CVE-2025-68468 中危 0.6.31-17.el7 avahi: Avahi: Denial of Service via crafted mDNS/DNS-SD announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68468

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-01-12 18:15 修改: 2026-01-16 16:52

xz-libs CVE-2026-34743 中危 5.2.2-1.el7 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-02 19:21 修改: 2026-04-15 17:33

yajl CVE-2022-24795 中危 2.0.4-4.el7 yajl: heap-based buffer overflow when handling large inputs due to an integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24795

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-04-05 16:15 修改: 2024-11-21 06:51

yajl CVE-2023-33460 中危 2.0.4-4.el7 yajl: Memory leak in yajl_tree_parse function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-33460

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-06-06 12:15 修改: 2025-01-08 17:15

yajl CVE-2026-24825 中危 2.0.4-4.el7 ydb: ydb: Denial of Service via memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24825

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-01-27 09:15 修改: 2026-04-15 00:35

avahi-libs CVE-2025-68471 中危 0.6.31-17.el7 avahi: Avahi: Denial of Service via unsolicited CNAME announcements

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68471

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-01-12 18:15 修改: 2026-01-16 16:53

avahi-libs CVE-2026-24401 中危 0.6.31-17.el7 avahi: Avahi: Denial of Service via recursive CNAME record in mDNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24401

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-01-24 02:15 修改: 2026-02-12 15:58

avahi-libs CVE-2026-34933 中危 0.6.31-17.el7 avahi: avahi-daemon: Avahi: Denial of Service via D-Bus method call

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34933

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-03 23:17 修改: 2026-04-13 17:26

bash CVE-2012-6711 中危 4.2.46-28.el7 bash: heap-based buffer overflow during echo of unsupported characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-6711

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-18 18:15 修改: 2024-11-21 01:46

zlib CVE-2022-37434 中危 1.2.7-17.el7 1.2.7-21.el7_9 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-05 07:15 修改: 2025-05-30 20:15

zlib CVE-2023-45853 中危 1.2.7-17.el7 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-14 02:15 修改: 2024-12-20 17:41

curl CVE-2022-27781 低危 7.29.0-42.el7 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

curl CVE-2022-35252 低危 7.29.0-42.el7 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-23 14:15 修改: 2025-05-05 17:18

curl CVE-2022-43552 低危 7.29.0-42.el7 7.29.0-59.el7_9.2 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-09 20:15 修改: 2024-11-21 07:26

curl CVE-2023-27534 低危 7.29.0-42.el7 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-04-23 17:16

nss-pem CVE-2018-1000121 低危 1.0.3-4.el7 1.0.3-5.el7 curl: LDAP NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000121

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

curl CVE-2023-28322 低危 7.29.0-42.el7 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-26 21:15 修改: 2026-02-13 20:16

curl CVE-2023-38546 低危 7.29.0-42.el7 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-18 04:15 修改: 2026-05-12 11:16

curl CVE-2024-11053 低危 7.29.0-42.el7 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-12-11 08:15 修改: 2025-11-03 21:16

curl CVE-2024-7264 低危 7.29.0-42.el7 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-31 08:15 修改: 2025-11-03 23:17

curl CVE-2025-14524 低危 7.29.0-42.el7 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:53

curl CVE-2025-15079 低危 7.29.0-42.el7 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:50

gnutls CVE-2015-0294 低危 3.3.26-9.el7 gnutls: certificate algorithm consistency checking issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0294

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-01-27 16:15 修改: 2024-11-21 02:22

gnutls CVE-2021-4209 低危 3.3.26-9.el7 GnuTLS: Null pointer dereference in MD_UPDATE

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-08-24 16:15 修改: 2024-11-21 06:37

gnutls CVE-2025-9820 低危 3.3.26-9.el7 gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-01-26 20:16 修改: 2026-05-12 13:17

curl CVE-2025-15224 低危 7.29.0-42.el7 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:47

curl CVE-2026-6276 低危 7.29.0-42.el7 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:21

binutils CVE-2017-16830 低危 2.25.1-31.base.el7 binutils: Segmentation fault in the print_gnu_property_note function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16830

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16831 低危 2.25.1-31.base.el7 binutils: Integer overflow in coffgen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16831

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16832 低危 2.25.1-31.base.el7 binutils: Segmentation fault in the pe_bfd_read_buildid function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16832

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-17080 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in bfd_getl32

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17080

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-30 21:29 修改: 2025-04-20 01:37

nss-softokn CVE-2016-1938 低危 3.28.3-6.el7 NSS: Errors in mp_div and mp_exptmod cryptographic functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-01-31 18:59 修改: 2026-05-06 22:30

nss-softokn CVE-2019-11727 低危 3.28.3-6.el7 3.53.1-6.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-softokn CVE-2019-17023 低危 3.28.3-6.el7 3.53.1-6.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

binutils CVE-2017-17121 低危 2.25.1-31.base.el7 binutils: Memory access violation via a crafted COFF binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17121

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-17122 低危 2.25.1-31.base.el7 binutils: Excessive memory allocation in the dump_relocs_in_section function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17122

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-17123 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the coff_slurp_reloc_table function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17123

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-17124 低危 2.25.1-31.base.el7 binutils: Heap buffer overflow in the _bfd_coff_read_string_table function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17124

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

gobject-introspection CVE-2017-18267 低危 1.50.0-1.el7 1.56.1-1.el7 poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18267

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-10 15:29 修改: 2024-11-21 03:19

gobject-introspection CVE-2018-10733 低危 1.50.0-1.el7 1.56.1-1.el7 libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10733

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-04 17:29 修改: 2024-11-21 03:41

gobject-introspection CVE-2018-10767 低危 1.50.0-1.el7 1.56.1-1.el7 libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10767

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-06 23:29 修改: 2024-11-21 03:42

gobject-introspection CVE-2018-10768 低危 1.50.0-1.el7 1.56.1-1.el7 poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10768

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-06 23:29 修改: 2024-11-21 03:42

gobject-introspection CVE-2018-13988 低危 1.50.0-1.el7 1.56.1-1.el7 poppler: out of bounds read in pdfunite

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-13988

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-25 23:29 修改: 2024-11-21 03:48

gpgme CVE-2014-3564 低危 1.3.2-5.el7 gpgme: heap-based buffer overflow in gpgsm status handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3564

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-10-20 17:55 修改: 2026-05-06 22:30

binutils CVE-2017-17125 低危 2.25.1-31.base.el7 binutils: Buffer over-read in the _bfd_elf_get_symbol_version_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17125

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

iproute CVE-2019-20795 低危 3.10.0-87.el7 iproute: use-after-free in get_netnsid_from_name in ip/ipnetns.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20795

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-05-09 21:15 修改: 2024-11-21 04:39

iptables CVE-2019-11360 低危 1.4.21-18.2.el7_4 iptables: buffer overflow in iptables-restore

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11360

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-07-12 14:15 修改: 2024-11-21 04:20

binutils CVE-2017-17126 低危 2.25.1-31.base.el7 binutils: Invalid memory access in the load_debug_section function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17126

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-6969 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in readelf when processing corrupt RL78 binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6969

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-17 09:59 修改: 2026-05-13 00:24

nss-softokn-freebl CVE-2016-1938 低危 3.28.3-6.el7 NSS: Errors in mp_div and mp_exptmod cryptographic functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-01-31 18:59 修改: 2026-05-06 22:30

nss-softokn-freebl CVE-2019-11727 低危 3.28.3-6.el7 3.53.1-6.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-softokn-freebl CVE-2019-17023 低危 3.28.3-6.el7 3.53.1-6.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

binutils CVE-2017-7209 低危 2.25.1-31.base.el7 binutils: Null pointer dereference in dump_section_as_bytes function in readelf

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7209

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-21 06:59 修改: 2026-05-13 00:24

binutils CVE-2017-7210 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-reads in objdump

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7210

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-21 06:59 修改: 2026-05-13 00:24

binutils CVE-2017-7223 低危 2.25.1-31.base.el7 binutils: Global buffer overflow when attempting to unget EOF character

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7223

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

binutils CVE-2017-7224 低危 2.25.1-31.base.el7 binutils: Invalid write in find_nearest_line function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7224

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

dbus CVE-2014-3636 低危 1:1.6.12-17.el7 dbus: denial of service by queuing or splitting file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3636

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-10-25 20:55 修改: 2026-05-06 22:30

dbus CVE-2014-3637 低危 1:1.6.12-17.el7 dbus: denial of service by creating unkillable D-Bus connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3637

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus CVE-2014-3638 低危 1:1.6.12-17.el7 dbus: denial of service in method call handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3638

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus CVE-2014-3639 低危 1:1.6.12-17.el7 dbus: denial of service flaw in incomplete connection handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3639

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus CVE-2015-0245 低危 1:1.6.12-17.el7 dbus: denial of service in dbus systemd activation

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0245

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-13 15:59 修改: 2026-05-06 22:30

dbus CVE-2020-35512 低危 1:1.6.12-17.el7 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:27

binutils CVE-2017-7225 低危 2.25.1-31.base.el7 binutils: Null pointer dereference and invalid write in find_nearest_line function in addr2line

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7225

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

binutils CVE-2017-7226 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in pe_ILF_object_p function in libbfd

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7226

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

binutils CVE-2017-7227 低危 2.25.1-31.base.el7 binutils: Heap-based buffer overflow in ld due to missing null termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7227

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

binutils CVE-2017-7299 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read in bfd_elf_final_link function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7299

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7300 低危 2.25.1-31.base.el7 binutils: Heap-buffer overflow in aout_link_add_symbols function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7300

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7301 低危 2.25.1-31.base.el7 binutils: Off-by-one error in aout_link_add_symbols function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7301

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7302 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read in wap_std_reloc_out function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7302

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7303 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read in find_link function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7303

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7304 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read in copy_special_section_fields function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7304

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

dbus-libs CVE-2014-3636 低危 1:1.6.12-17.el7 dbus: denial of service by queuing or splitting file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3636

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-10-25 20:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3637 低危 1:1.6.12-17.el7 dbus: denial of service by creating unkillable D-Bus connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3637

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

krb5-libs CVE-2017-11462 低危 1.15.1-8.el7 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-13 16:29 修改: 2026-05-13 00:24

krb5-libs CVE-2018-5729 低危 1.15.1-8.el7 1.15.1-34.el7 krb5: null dereference in kadmind or DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-06 20:29 修改: 2025-05-05 14:14

krb5-libs CVE-2018-5730 低危 1.15.1-8.el7 1.15.1-34.el7 krb5: DN container check bypass by supplying special crafted data

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5730

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-06 20:29 修改: 2025-05-05 14:12

krb5-libs CVE-2024-26458 低危 1.15.1-8.el7 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-29 01:44 修改: 2025-05-23 15:39

krb5-libs CVE-2024-26461 低危 1.15.1-8.el7 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-29 01:44 修改: 2025-05-23 15:30

nss-sysinit CVE-2019-11727 低危 3.28.4-8.el7 3.53.1-3.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-sysinit CVE-2019-17023 低危 3.28.4-8.el7 3.53.1-3.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

nss-sysinit CVE-2020-12413 低危 3.28.4-8.el7 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-16 22:15 修改: 2025-03-19 16:15

nss-sysinit CVE-2024-7531 低危 3.28.4-8.el7 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-06 13:15 修改: 2025-03-19 16:15

dbus-libs CVE-2014-3638 低危 1:1.6.12-17.el7 dbus: denial of service in method call handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3638

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3639 低危 1:1.6.12-17.el7 dbus: denial of service flaw in incomplete connection handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3639

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus-libs CVE-2015-0245 低危 1:1.6.12-17.el7 dbus: denial of service in dbus systemd activation

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0245

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-13 15:59 修改: 2026-05-06 22:30

less CVE-2014-9488 低危 458-9.el7 less: out of bounds read access in is_utf8_well_formed()

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9488

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-04-14 18:59 修改: 2026-05-06 22:30

dbus-libs CVE-2020-35512 低危 1:1.6.12-17.el7 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:27

device-mapper CVE-2020-8991 低危 7:1.02.140-8.el7 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-02-14 05:15 修改: 2024-11-21 05:39

device-mapper-libs CVE-2020-8991 低危 7:1.02.140-8.el7 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-02-14 05:15 修改: 2024-11-21 05:39

binutils CVE-2017-7614 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in bfd_elf_final_link function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7614

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

binutils CVE-2017-8392 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the _bfd_dwarf2_find_nearest_line function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8392

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

libblkid CVE-2015-5218 低危 2.23.2-43.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

libblkid CVE-2021-37600 低危 2.23.2-43.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

binutils CVE-2017-8393 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read due to wrong assumption for objcopy and strip

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8393

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8394 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the _bfd_elf_large_com_section

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8394

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

libcap CVE-2023-2602 低危 2.22-9.el7 libcap: Memory Leak on pthread_create() Error

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2602

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-06-06 20:15 修改: 2024-11-21 07:58

elfutils-default-yama-scope CVE-2016-10254 低危 0.168-8.el7 elfutils: Memory allocation failure in allocate_elf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10254

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2016-10255 低危 0.168-8.el7 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10255

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7607 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the handle_gnu_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7607

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7608 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7608

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

libcom_err CVE-2015-1572 低危 1.42.9-10.el7 e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1572

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-24 15:59 修改: 2026-05-06 22:30

elfutils-default-yama-scope CVE-2017-7609 低危 0.168-8.el7 elfutils: Memory allocation failure in elf_compress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7609

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7610 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7610

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7611 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_symtab_shndx function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7611

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7612 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_sysv_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7612

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7613 低危 0.168-8.el7 elfutils: elflint.c does not validate the number of sections and segments

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7613

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2018-16062 低危 0.168-8.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16062

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-29 03:29 修改: 2024-11-21 03:52

elfutils-default-yama-scope CVE-2018-16402 低危 0.168-8.el7 0.176-2.el7 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

nss-tools CVE-2019-11727 低危 3.28.4-8.el7 3.53.1-3.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-tools CVE-2019-17023 低危 3.28.4-8.el7 3.53.1-3.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

nss-tools CVE-2020-12413 低危 3.28.4-8.el7 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-16 22:15 修改: 2025-03-19 16:15

nss-tools CVE-2024-7531 低危 3.28.4-8.el7 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-06 13:15 修改: 2025-03-19 16:15

elfutils-default-yama-scope CVE-2018-16403 低危 0.168-8.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-default-yama-scope CVE-2018-18310 低危 0.168-8.el7 0.176-2.el7 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18310

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-15 02:29 修改: 2024-11-21 03:55

elfutils-default-yama-scope CVE-2018-18520 低危 0.168-8.el7 0.176-2.el7 elfutils: eu-size cannot handle recursive ar files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18520

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-default-yama-scope CVE-2018-18521 低危 0.168-8.el7 0.176-2.el7 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18521

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-default-yama-scope CVE-2019-7149 低危 0.168-8.el7 0.176-2.el7 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7149

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-default-yama-scope CVE-2019-7150 低危 0.168-8.el7 0.176-2.el7 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7150

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-default-yama-scope CVE-2019-7664 低危 0.168-8.el7 0.176-2.el7 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7664

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-default-yama-scope CVE-2019-7665 低危 0.168-8.el7 0.176-2.el7 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7665

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-default-yama-scope CVE-2024-25260 低危 0.168-8.el7 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-20 18:15 修改: 2025-04-25 20:42

binutils CVE-2017-8395 低危 2.25.1-31.base.el7 binutils: Out-of-bounds write in the _bfd_generic_get_section_contents function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8395

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2016-10254 低危 0.168-8.el7 elfutils: Memory allocation failure in allocate_elf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10254

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2016-10255 低危 0.168-8.el7 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10255

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7607 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the handle_gnu_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7607

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

nss-util CVE-2019-11727 低危 3.28.4-3.el7 3.53.1-1.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-util CVE-2019-17023 低危 3.28.4-3.el7 3.53.1-1.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

elfutils-libelf CVE-2017-7608 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7608

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7609 低危 0.168-8.el7 elfutils: Memory allocation failure in elf_compress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7609

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7610 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7610

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

numpy CVE-2014-1858 低危 1:1.7.1-11.el7 numpy: f2py insecure temporary file use

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-1858

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-01-08 19:29 修改: 2024-11-21 02:05

numpy CVE-2014-1859 低危 1:1.7.1-11.el7 numpy: f2py insecure temporary file use

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-1859

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-01-08 19:29 修改: 2024-11-21 02:05

numpy CVE-2017-12852 低危 1:1.7.1-11.el7 numpy: Missing input validation on empty list or ndarray in numpy.pad function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12852

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-08-15 16:29 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7611 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_symtab_shndx function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7611

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7612 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_sysv_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7612

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7613 低危 0.168-8.el7 elfutils: elflint.c does not validate the number of sections and segments

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7613

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2018-16062 低危 0.168-8.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16062

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-29 03:29 修改: 2024-11-21 03:52

elfutils-libelf CVE-2018-16402 低危 0.168-8.el7 0.176-2.el7 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-libelf CVE-2018-16403 低危 0.168-8.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-libelf CVE-2018-18310 低危 0.168-8.el7 0.176-2.el7 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18310

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-15 02:29 修改: 2024-11-21 03:55

elfutils-libelf CVE-2018-18520 低危 0.168-8.el7 0.176-2.el7 elfutils: eu-size cannot handle recursive ar files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18520

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libelf CVE-2018-18521 低危 0.168-8.el7 0.176-2.el7 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18521

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libelf CVE-2019-7149 低危 0.168-8.el7 0.176-2.el7 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7149

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libelf CVE-2019-7150 低危 0.168-8.el7 0.176-2.el7 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7150

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libelf CVE-2019-7664 低危 0.168-8.el7 0.176-2.el7 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7664

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libelf CVE-2019-7665 低危 0.168-8.el7 0.176-2.el7 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7665

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libelf CVE-2024-25260 低危 0.168-8.el7 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-20 18:15 修改: 2025-04-25 20:42

binutils CVE-2017-8396 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read in the existing reloc offset range tests

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8396

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2016-10254 低危 0.168-8.el7 elfutils: Memory allocation failure in allocate_elf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10254

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2016-10255 低危 0.168-8.el7 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10255

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7607 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the handle_gnu_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7607

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7608 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7608

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

openldap CVE-2016-4984 低危 2.4.44-5.el7 openldap-servers: /usr/libexec/openldap/generate-server-cert.sh create world readable password file

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4984

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-17 13:18 修改: 2025-04-20 01:37

openldap CVE-2020-15719 低危 2.4.44-5.el7 openldap: Certificate validation incorrectly matches name against CN-ID

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-14 14:15 修改: 2024-11-21 05:06

openldap CVE-2023-2953 低危 2.4.44-5.el7 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-30 22:15 修改: 2025-01-10 22:15

elfutils-libs CVE-2017-7609 低危 0.168-8.el7 elfutils: Memory allocation failure in elf_compress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7609

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7610 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7610

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7611 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_symtab_shndx function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7611

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7612 低危 0.168-8.el7 elfutils: Heap-buffer overflow in the check_sysv_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7612

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7613 低危 0.168-8.el7 elfutils: elflint.c does not validate the number of sections and segments

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7613

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2018-16062 低危 0.168-8.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16062

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-29 03:29 修改: 2024-11-21 03:52

elfutils-libs CVE-2018-16402 低危 0.168-8.el7 0.176-2.el7 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

libcurl CVE-2016-0755 低危 7.29.0-42.el7 curl: NTLM credentials not-checked for proxy connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-0755

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-01-29 20:59 修改: 2026-05-06 22:30

libcurl CVE-2016-8616 低危 7.29.0-42.el7 curl: Case insensitive password comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8616

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8621 低危 7.29.0-42.el7 curl: curl_getdate out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8621

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8622 低危 7.29.0-42.el7 curl: URL unescape heap overflow via integer truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8622

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8623 低危 7.29.0-42.el7 curl: Use-after-free via shared cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8623

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-9586 低危 7.29.0-42.el7 curl: printf floating point buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9586

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-23 18:29 修改: 2024-11-21 03:01

libcurl CVE-2017-1000100 低危 7.29.0-42.el7 curl: TFTP sends more than buffer size

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000100

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

libcurl CVE-2017-7407 低危 7.29.0-42.el7 curl: --write-out out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7407

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-03 20:59 修改: 2026-05-13 00:24

libcurl CVE-2018-1000121 低危 7.29.0-42.el7 7.29.0-51.el7 curl: LDAP NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000121

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

libcurl CVE-2018-14618 低危 7.29.0-42.el7 7.29.0-51.el7_6.3 curl: NTLM password overflow via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14618

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-05 19:29 修改: 2024-11-21 03:49

openssh CVE-2017-15906 低危 7.4p1-13.el7_4 7.4p1-16.el7 openssh: Improper write operations in readonly mode allow for zero-length file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15906

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-10-26 03:29 修改: 2026-05-28 19:16

openssh CVE-2018-15473 低危 7.4p1-13.el7_4 7.4p1-21.el7 openssh: User enumeration via malformed packets in authentication requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15473

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-08-17 19:29 修改: 2025-12-17 22:15

openssh CVE-2019-6109 低危 7.4p1-13.el7_4 openssh: Missing character encoding in progress display allows for spoofing of scp client output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6109

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-31 18:29 修改: 2026-05-28 19:16

openssh CVE-2026-35386 低危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35386

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:03

openssh CVE-2026-35387 低危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35387

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:05

openssh CVE-2026-35388 低危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35388

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:12

libcurl CVE-2018-16842 低危 7.29.0-42.el7 7.29.0-54.el7 curl: Heap-based buffer over-read in the curl tool warning formatting

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16842

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-31 19:29 修改: 2024-11-21 03:53

libcurl CVE-2018-20483 低危 7.29.0-42.el7 wget: Information exposure in set_file_metadata function in xattr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20483

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-12-26 18:29 修改: 2024-11-21 04:01

libcurl CVE-2019-5436 低危 7.29.0-42.el7 7.29.0-57.el7 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5436

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-28 19:29 修改: 2026-04-15 21:17

libcurl CVE-2020-8231 低危 7.29.0-42.el7 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38

libcurl CVE-2021-22898 低危 7.29.0-42.el7 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-11 16:15 修改: 2026-04-16 14:16

libcurl CVE-2021-22925 低危 7.29.0-42.el7 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-05 21:15 修改: 2026-04-16 17:16

libcurl CVE-2022-27781 低危 7.29.0-42.el7 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

libcurl CVE-2022-35252 低危 7.29.0-42.el7 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-23 14:15 修改: 2025-05-05 17:18

libcurl CVE-2022-43552 低危 7.29.0-42.el7 7.29.0-59.el7_9.2 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-09 20:15 修改: 2024-11-21 07:26

libcurl CVE-2023-27534 低危 7.29.0-42.el7 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-30 20:15 修改: 2025-04-23 17:16

libcurl CVE-2023-28322 低危 7.29.0-42.el7 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-26 21:15 修改: 2026-02-13 20:16

libcurl CVE-2023-38546 低危 7.29.0-42.el7 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-18 04:15 修改: 2026-05-12 11:16

libcurl CVE-2024-11053 低危 7.29.0-42.el7 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-12-11 08:15 修改: 2025-11-03 21:16

libcurl CVE-2024-7264 低危 7.29.0-42.el7 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-07-31 08:15 修改: 2025-11-03 23:17

libcurl CVE-2025-14524 低危 7.29.0-42.el7 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:53

libcurl CVE-2025-15079 低危 7.29.0-42.el7 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:50

libcurl CVE-2025-15224 低危 7.29.0-42.el7 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:47

openssh-clients CVE-2017-15906 低危 7.4p1-13.el7_4 7.4p1-16.el7 openssh: Improper write operations in readonly mode allow for zero-length file creation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15906

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-10-26 03:29 修改: 2026-05-28 19:16

openssh-clients CVE-2018-15473 低危 7.4p1-13.el7_4 7.4p1-21.el7 openssh: User enumeration via malformed packets in authentication requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15473

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-08-17 19:29 修改: 2025-12-17 22:15

openssh-clients CVE-2019-6109 低危 7.4p1-13.el7_4 openssh: Missing character encoding in progress display allows for spoofing of scp client output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6109

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-31 18:29 修改: 2026-05-28 19:16

openssh-clients CVE-2026-35386 低危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Arbitrary command execution via shell metacharacters in username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35386

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:03

openssh-clients CVE-2026-35387 低危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Information disclosure due to unintended cryptographic algorithm usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35387

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:05

openssh-clients CVE-2026-35388 低危 7.4p1-13.el7_4 OpenSSH: OpenSSH: Low integrity impact from unconfirmed proxy-mode multiplexing sessions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35388

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2026-04-02 17:16 修改: 2026-04-27 14:12

libcurl CVE-2026-6276 低危 7.29.0-42.el7 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:21

elfutils-libs CVE-2018-16403 低危 0.168-8.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16403

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

libdb CVE-2019-2708 低危 5.3.21-20.el7 libdb: Denial of service in the Data Store component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2708

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-04-23 19:32 修改: 2024-11-21 04:41

elfutils-libs CVE-2018-18310 低危 0.168-8.el7 0.176-2.el7 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18310

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-15 02:29 修改: 2024-11-21 03:55

libdb-utils CVE-2019-2708 低危 5.3.21-20.el7 libdb: Denial of service in the Data Store component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2708

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-04-23 19:32 修改: 2024-11-21 04:41

elfutils-libs CVE-2018-18520 低危 0.168-8.el7 0.176-2.el7 elfutils: eu-size cannot handle recursive ar files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18520

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libs CVE-2018-18521 低危 0.168-8.el7 0.176-2.el7 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18521

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libs CVE-2019-7149 低危 0.168-8.el7 0.176-2.el7 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7149

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libs CVE-2019-7150 低危 0.168-8.el7 0.176-2.el7 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7150

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libs CVE-2019-7664 低危 0.168-8.el7 0.176-2.el7 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7664

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libs CVE-2019-7665 低危 0.168-8.el7 0.176-2.el7 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7665

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libs CVE-2024-25260 低危 0.168-8.el7 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-20 18:15 修改: 2025-04-25 20:42

binutils CVE-2017-8397 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read and write while processing binary containing reloc(s) with negative addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8397

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8398 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read while dumping the debug information from a corrupt binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8398

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8421 低危 2.25.1-31.base.el7 binutils: Memory exhaustion in objdump via a crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-02 17:59 修改: 2026-05-13 00:24

binutils CVE-2017-9038 低危 2.25.1-31.base.el7 binutils: Heap-buffer overflow in the byte_get_little_endian

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9038

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

libgcc CVE-2015-5276 低危 4.8.5-16.el7 gcc: Predictable randomness from std::random_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30

libgcc CVE-2016-2226 低危 4.8.5-16.el7 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4487 低危 4.8.5-16.el7 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4488 低危 4.8.5-16.el7 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4489 低危 4.8.5-16.el7 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4490 低危 4.8.5-16.el7 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4491 低危 4.8.5-16.el7 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4492 低危 4.8.5-16.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4493 低危 4.8.5-16.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

openssl-libs CVE-2017-3735 低危 1:1.0.2k-8.el7 1:1.0.2k-16.el7 openssl: Malformed X.509 IPAdressFamily could cause OOB read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3735

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-28 19:29 修改: 2026-05-13 00:24

openssl-libs CVE-2017-3738 低危 1:1.0.2k-8.el7 1:1.0.2k-12.el7 openssl: rsaz_1024_mul_avx2 overflow bug on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-3738

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-07 16:29 修改: 2025-04-20 01:37

openssl-libs CVE-2018-0734 低危 1:1.0.2k-8.el7 1:1.0.2k-19.el7 openssl: timing side channel attack in the DSA signature algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0734

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-30 12:29 修改: 2024-11-21 03:38

openssl-libs CVE-2018-0735 低危 1:1.0.2k-8.el7 1:1.0.2k-16.el7_6.1 openssl: timing side channel attack in the ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0735

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-29 13:29 修改: 2024-11-21 03:38

openssl-libs CVE-2018-0737 低危 1:1.0.2k-8.el7 1:1.0.2k-16.el7 openssl: RSA key generation cache timing vulnerability in crypto/rsa/rsa_gen.c allows attackers to recover private keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0737

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-16 18:29 修改: 2024-11-21 03:38

openssl-libs CVE-2019-1551 低危 1:1.0.2k-8.el7 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-12-06 18:15 修改: 2024-11-21 04:36

openssl-libs CVE-2019-1563 低危 1:1.0.2k-8.el7 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-10 17:15 修改: 2024-11-21 04:36

openssl-libs CVE-2020-1968 低危 1:1.0.2k-8.el7 openssl: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1968

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-09 14:15 修改: 2026-04-16 15:16

openssl-libs CVE-2022-3358 低危 1:1.0.2k-8.el7 openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3358

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-11 15:15 修改: 2024-11-21 07:19

openssl-libs CVE-2023-0464 低危 1:1.0.2k-8.el7 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-22 17:15 修改: 2025-05-05 16:15

openssl-libs CVE-2023-0465 低危 1:1.0.2k-8.el7 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-28 15:15 修改: 2025-02-18 21:15

openssl-libs CVE-2023-3446 低危 1:1.0.2k-8.el7 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-07-19 12:15 修改: 2025-04-23 17:16

openssl-libs CVE-2023-3817 低危 1:1.0.2k-8.el7 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-07-31 16:15 修改: 2025-05-05 16:15

openssl-libs CVE-2023-5678 低危 1:1.0.2k-8.el7 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-06 16:15 修改: 2026-05-12 11:16

openssl-libs CVE-2023-6129 低危 1:1.0.2k-8.el7 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-01-09 17:15 修改: 2026-05-12 11:16

openssl-libs CVE-2024-0727 低危 1:1.0.2k-8.el7 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-01-26 09:15 修改: 2026-05-12 12:16

openssl-libs CVE-2024-13176 低危 1:1.0.2k-8.el7 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-20 14:15 修改: 2026-04-15 00:35

openssl-libs CVE-2024-41996 低危 1:1.0.2k-8.el7 openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41996

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-26 06:15 修改: 2026-05-12 12:17

openssl-libs CVE-2024-5535 低危 1:1.0.2k-8.el7 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-27 11:15 修改: 2026-05-12 12:17

openssl-libs CVE-2025-15468 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-02-02 18:38

openssl-libs CVE-2025-15469 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-02-02 18:37

openssl-libs CVE-2025-68160 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2025-69418 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2025-69420 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2025-69421 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-22795 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-22796 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-28387 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-28388 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-28389 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-31789 低危 1:1.0.2k-8.el7 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

libgcc CVE-2017-11671 低危 4.8.5-16.el7 4.8.5-28.el7 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-26 21:29 修改: 2025-04-20 01:37

libgcc CVE-2018-20657 低危 4.8.5-16.el7 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

libgcc CVE-2019-14250 低危 4.8.5-16.el7 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

libgcc CVE-2021-3826 低危 4.8.5-16.el7 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

libgcc CVE-2021-46195 低危 4.8.5-16.el7 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-14 20:15 修改: 2024-11-21 06:33

libgcc CVE-2022-27943 低危 4.8.5-16.el7 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56

binutils CVE-2017-9039 低危 2.25.1-31.base.el7 binutils: Memory consumption via many program headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9039

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9040 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the process_mips_specific_function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9040

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9041 低危 2.25.1-31.base.el7 binutils: Heap buffer overflow in the process_mips_specific function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9041

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9042 低危 2.25.1-31.base.el7 binutils: Invalid variable type in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9042

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

pcre CVE-2015-8382 低危 8.32-17.el7 php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8382

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

pcre CVE-2017-11164 低危 8.32-17.el7 pcre: OP_KETRMAX feature in the match function in pcre_exec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-11 03:29 修改: 2025-04-20 01:37

pcre CVE-2017-7244 低危 8.32-17.el7 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7244

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

pcre CVE-2017-7245 低危 8.32-17.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

pcre CVE-2017-7246 低危 8.32-17.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

pcre CVE-2020-14155 低危 8.32-17.el7 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-06-15 17:15 修改: 2024-11-21 05:02

binutils CVE-2017-9043 低危 2.25.1-31.base.el7 binutils: Shift exponent too large for type unsigned long in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9044 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read in the print_symbol_for_build_attribute function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9044

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9742 低危 2.25.1-31.base.el7 binutils: Global buffer over-read in print_insn_score16 function while disassembling corrupt score binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9742

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

libgcrypt CVE-2014-3591 低危 1.5.3-14.el7 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3591

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:08

libgcrypt CVE-2015-0837 低危 1.5.3-14.el7 libgcrypt: last-level cache side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0837

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:23

libgcrypt CVE-2026-41990 低危 1.5.3-14.el7 Libgcrypt: Libgcrypt: Denial of Service or data integrity issues from missing bounds check during Dilithium signing.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41990

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-23 05:16 修改: 2026-04-27 18:33

binutils CVE-2017-9743 低危 2.25.1-31.base.el7 binutils: Global buffer over-read in print_insn_score32 function while disassembling corrupt score binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9743

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9744 低危 2.25.1-31.base.el7 binutils: Address violation in sh_elf_set_mach_from_flags function when disassembling a corrupt SH binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9744

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9745 低危 2.25.1-31.base.el7 binutils: Heap buffer over-read in _bfd_vms_slurp_etir function when handling VMS alpha binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9746 低危 2.25.1-31.base.el7 binutils: Heap buffer over-read in disassemble_bytes function when disassembling a corrupt binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9746

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9747 低危 2.25.1-31.base.el7 binutils: Stack-based buffer over-read in ieee_archive_p function while disassembling corrupt IEEE binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9747

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9748 低危 2.25.1-31.base.el7 binutils: Stack-based buffer over-read in ieee_object_p function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9748

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9749 低危 2.25.1-31.base.el7 binutils: Global buffer over-read in *regs* macros when disassembling corrupt bfin binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9749

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9750 低危 2.25.1-31.base.el7 binutils: Global buffer over-read in opcodes/rx-decode.opc when disassembling a corrupt RX binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9750

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

perl CVE-2013-7422 低危 4:5.16.3-292.el7 perl: segmentation fault in S_regmatch on negative backreference

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7422

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-08-16 23:59 修改: 2026-05-06 22:30

perl-File-Path CVE-2017-6512 低危 2.09-2.el7 perl-File-Path: rmtree/remove_tree race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6512

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-06-01 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-9751 低危 2.25.1-31.base.el7 binutils: Stack-based buffer over-read in opcodes/rl78-decode.opc when disassembling a corrupt RL78 binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9751

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9752 低危 2.25.1-31.base.el7 binutils: Heap buffer over-read in f_bfd_vms_get_value function when processing a corrupt Alpha VMA binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9752

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9753 低危 2.25.1-31.base.el7 binutils: Address violation in versados_mkobject function when disassembling a corrupt versados binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9753

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

libgfortran CVE-2015-5276 低危 4.8.5-16.el7_4.1 gcc: Predictable randomness from std::random_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30

libgfortran CVE-2016-2226 低危 4.8.5-16.el7_4.1 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2016-4487 低危 4.8.5-16.el7_4.1 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2016-4488 低危 4.8.5-16.el7_4.1 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2016-4489 低危 4.8.5-16.el7_4.1 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2016-4490 低危 4.8.5-16.el7_4.1 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2016-4491 低危 4.8.5-16.el7_4.1 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2016-4492 低危 4.8.5-16.el7_4.1 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2016-4493 低危 4.8.5-16.el7_4.1 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgfortran CVE-2017-11671 低危 4.8.5-16.el7_4.1 4.8.5-28.el7 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-07-26 21:29 修改: 2025-04-20 01:37

libgfortran CVE-2018-20657 低危 4.8.5-16.el7_4.1 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

libgfortran CVE-2019-14250 低危 4.8.5-16.el7_4.1 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

libgfortran CVE-2021-3826 低危 4.8.5-16.el7_4.1 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

libgfortran CVE-2021-46195 低危 4.8.5-16.el7_4.1 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-01-14 20:15 修改: 2024-11-21 06:33

libgfortran CVE-2022-27943 低危 4.8.5-16.el7_4.1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56

libidn CVE-2015-2059 低危 1.28-4.el7 libidn: out-of-bounds read with stringprep on invalid UTF-8

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2059

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-08-12 14:59 修改: 2026-05-06 22:30

libidn CVE-2015-8948 低危 1.28-4.el7 libidn: Out-of-bounds read due to use of fgets with fixed-size buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8948

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2016-6261 低危 1.28-4.el7 libidn: Out of bounds stack read in idna_to_ascii_4i

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6261

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2016-6262 低危 1.28-4.el7 libidn: Out-of-bounds read when reading zero byte as input

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6262

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2016-6263 低危 1.28-4.el7 libidn: Crash when given invalid UTF-8 data on input

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6263

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2017-14062 低危 1.28-4.el7 libidn2: Integer overflow in puny_decode.c/decode_digit

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14062

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-31 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-9754 低危 2.25.1-31.base.el7 binutils: Stack-based buffer over-read in process_otr function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9754

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9755 低危 2.25.1-31.base.el7 binutils: Global buffer over-read in opcodes/i386-dis.c while checking invalid registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9755

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9756 低危 2.25.1-31.base.el7 binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9756

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

perl-Git CVE-2017-15298 低危 1.8.3.1-12.el7_4 git: Mishandling layers of tree objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15298

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-10-14 22:29 修改: 2025-04-20 01:37

perl-Git CVE-2023-25815 低危 1.8.3.1-12.el7_4 git: malicious placement of crafted messages when git was compiled with runtime prefix

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25815

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-25 20:15 修改: 2025-11-04 17:15

perl-Git CVE-2024-32020 低危 1.8.3.1-12.el7_4 git: insecure hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 19:15 修改: 2026-01-06 17:01

perl-Git CVE-2024-32021 低危 1.8.3.1-12.el7_4 git: symlink bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 20:15 修改: 2026-01-05 19:19

perl-Git CVE-2024-50349 低危 1.8.3.1-12.el7_4 git: Git does not sanitize URLs when asking for credentials interactively

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50349

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 19:15 修改: 2025-12-18 16:42

perl-Git CVE-2024-52006 低危 1.8.3.1-12.el7_4 git: Newline confusion in credential helpers can lead to credential exfiltration in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52006

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 19:15 修改: 2025-12-18 16:10

perl-Git CVE-2025-46835 低危 1.8.3.1-12.el7_4 git: Git GUI can create and overwrite files for which the user has write permission

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46835

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 15:15 修改: 2026-04-15 00:35

binutils CVE-2017-9954 低危 2.25.1-31.base.el7 binutils: stack-based buffer over-read in getvalue function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9954

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-26 23:29 修改: 2026-05-13 00:24

binutils CVE-2017-9955 低危 2.25.1-31.base.el7 binutils: heap buffer over-read in get_build_id function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9955

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-26 23:29 修改: 2026-05-13 00:24

libmount CVE-2015-5218 低危 2.23.2-43.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

libmount CVE-2021-37600 低危 2.23.2-43.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

binutils CVE-2018-10372 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: Heap-base buffer over-read in dwarf.c:process_cu_tu_index() allows for denial of service via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10372

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-25 09:29 修改: 2024-11-21 03:41

binutils CVE-2018-10373 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: NULL pointer dereference in dwarf2.c:concat_filename() allows for denial of service via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10373

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-25 09:29 修改: 2024-11-21 03:41

libpcap CVE-2019-15165 低危 14:1.5.3-9.el7 libpcap: Resource exhaustion during PHB header length validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15165

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-10-03 19:15 修改: 2025-12-03 19:15

libpcap CVE-2024-2397 低危 14:1.5.3-9.el7 tcpdump: Crafted .pcap file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2397

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-04-12 14:15 修改: 2026-04-15 00:35

libpcap CVE-2025-11961 低危 14:1.5.3-9.el7 libpcap: libpcap: Memory corruption via malformed MAC-48 address input

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11961

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-12-31 01:15 修改: 2026-04-15 00:35

binutils CVE-2018-10534 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: out of bounds memory write in peXXigen.c files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10534

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-29 15:29 修改: 2024-11-21 03:41

binutils CVE-2018-10535 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: NULL pointer dereference in elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10535

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-29 15:29 修改: 2024-11-21 03:41

binutils CVE-2018-12641 低危 2.25.1-31.base.el7 2.27-41.base.el7 binutils: Stack Exhaustion in the demangling functions provided by libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12641

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-22 12:29 修改: 2024-11-21 03:45

binutils CVE-2018-12697 低危 2.25.1-31.base.el7 2.27-41.base.el7 binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12697

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-23 23:29 修改: 2024-11-21 03:45

binutils CVE-2018-12698 低危 2.25.1-31.base.el7 binutils: excessive memory consumption in demangle_template in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12698

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-23 23:29 修改: 2024-11-21 03:45

binutils CVE-2018-12699 低危 2.25.1-31.base.el7 binutils: heap-based buffer overflow in finish_stab in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12699

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-23 23:29 修改: 2024-11-21 03:45

perl-Pod-Escapes CVE-2013-7422 低危 1:1.04-292.el7 perl: segmentation fault in S_regmatch on negative backreference

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7422

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-08-16 23:59 修改: 2026-05-06 22:30

expat CVE-2016-9063 低危 2.1.0-10.el7_3 firefox: Possible integer overflow to fix inside XML_Parse in Expat

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9063

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:00

expat CVE-2019-15903 低危 2.1.0-10.el7_3 2.1.0-12.el7 expat: heap-based buffer over-read via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15903

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-09-04 06:15 修改: 2025-05-30 20:15

expat CVE-2025-66382 低危 2.1.0-10.el7_3 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-11-28 07:15 修改: 2026-06-02 14:16

expat CVE-2026-24515 低危 2.1.0-10.el7_3 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-23 08:16 修改: 2026-06-02 14:16

expat CVE-2026-41080 低危 2.1.0-10.el7_3 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-04-16 17:16 修改: 2026-04-27 07:16

file-libs CVE-2014-9620 低危 5.11-33.el7 file: limit the number of ELF notes processed

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9620

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-01-21 18:59 修改: 2026-05-06 22:30

libquadmath CVE-2015-5276 低危 4.8.5-16.el7_4.1 gcc: Predictable randomness from std::random_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30

libquadmath CVE-2016-2226 低危 4.8.5-16.el7_4.1 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libquadmath CVE-2016-4487 低危 4.8.5-16.el7_4.1 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libquadmath CVE-2016-4488 低危 4.8.5-16.el7_4.1 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libquadmath CVE-2016-4489 低危 4.8.5-16.el7_4.1 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libquadmath CVE-2016-4490 低危 4.8.5-16.el7_4.1 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libquadmath CVE-2016-4491 低危 4.8.5-16.el7_4.1 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libquadmath CVE-2016-4492 低危 4.8.5-16.el7_4.1 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libquadmath CVE-2016-4493 低危 4.8.5-16.el7_4.1 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

perl-libs CVE-2013-7422 低危 4:5.16.3-292.el7 perl: segmentation fault in S_regmatch on negative backreference

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7422

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-08-16 23:59 修改: 2026-05-06 22:30

libquadmath CVE-2017-11671 低危 4.8.5-16.el7_4.1 4.8.5-28.el7 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-07-26 21:29 修改: 2025-04-20 01:37

libquadmath CVE-2018-20657 低危 4.8.5-16.el7_4.1 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

libquadmath CVE-2019-14250 低危 4.8.5-16.el7_4.1 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

libquadmath CVE-2021-3826 低危 4.8.5-16.el7_4.1 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

libquadmath CVE-2021-46195 低危 4.8.5-16.el7_4.1 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-01-14 20:15 修改: 2024-11-21 06:33

libquadmath CVE-2022-27943 低危 4.8.5-16.el7_4.1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56

file-libs CVE-2015-8865 低危 5.11-33.el7 file: Buffer over-write in finfo_open with malformed magic file

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8865

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-05-20 10:59 修改: 2026-05-06 22:30

file-libs CVE-2018-10360 低危 5.11-33.el7 5.11-36.el7 file: out-of-bounds read via a crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10360

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-11 10:29 修改: 2024-11-21 03:41

file-libs CVE-2022-48554 低危 5.11-33.el7 file: stack-based buffer over-read in file_copystr in funcs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48554

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

gawk CVE-2023-4156 低危 4.0.2-4.el7_3.1 gawk: heap out of bound read in builtin.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4156

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-25 18:15 修改: 2024-11-21 08:34

binutils CVE-2018-12934 低危 2.25.1-31.base.el7 binutils: Uncontrolled Resource Consumption in remember_Ktype in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12934

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-28 14:29 修改: 2024-11-21 03:46

binutils CVE-2018-13033 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: Uncontrolled Resource Consumption in execution of nm

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-13033

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-01 16:29 修改: 2024-11-21 03:46

binutils CVE-2018-17360 低危 2.25.1-31.base.el7 binutils: heap-based buffer over-read in bfd_getl32 in libbfd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17360

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-23 18:29 修改: 2024-11-21 03:54

binutils CVE-2018-17794 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in libiberty/cplus-dem.c:work_stuff_copy_to_from() via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17794

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-30 20:29 修改: 2024-11-21 03:54

perl-macros CVE-2013-7422 低危 4:5.16.3-292.el7 perl: segmentation fault in S_regmatch on negative backreference

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7422

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2015-08-16 23:59 修改: 2026-05-06 22:30

libss CVE-2015-1572 低危 1.42.9-10.el7 e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1572

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-24 15:59 修改: 2026-05-06 22:30

binutils CVE-2018-17985 低危 2.25.1-31.base.el7 binutils: Stack consumption problem caused by the cplus_demangle_type

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17985

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-04 23:29 修改: 2024-11-21 03:55

binutils CVE-2018-18484 低危 2.25.1-31.base.el7 binutils: Stack exhaustion in cp-demangle.c allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18484

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-18 21:29 修改: 2024-11-21 03:56

procps-ng CVE-2018-1121 低危 3.3.10-16.el7 procps: process hiding through race condition enumerating /proc

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1121

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-13 20:29 修改: 2024-11-21 03:59

procps-ng CVE-2018-1123 低危 3.3.10-16.el7 procps: denial of service in ps via mmap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1123

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-23 14:29 修改: 2024-11-21 03:59

procps-ng CVE-2018-1125 低危 3.3.10-16.el7 procps: stack buffer overflow in pgrep

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1125

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-23 14:29 修改: 2025-12-17 22:15

procps-ng CVE-2023-4016 低危 3.3.10-16.el7 procps: ps buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-02 05:15 修改: 2024-11-21 08:34

binutils CVE-2018-18605 低危 2.25.1-31.base.el7 binutils: heap-based buffer over-read in sec_merge_hash_lookup in merge.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18605

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-23 17:29 修改: 2024-11-21 03:56

binutils CVE-2018-18606 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in _bfd_add_merge_section in merge_strings function in merge.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18606

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-23 17:29 修改: 2024-11-21 03:56

binutils CVE-2018-18607 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in elf_link_input_bfd in elflink.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18607

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-23 17:29 修改: 2024-11-21 03:56

binutils CVE-2018-18700 低危 2.25.1-31.base.el7 binutils: Recursive Stack Overflow within function d_name, d_encoding, and d_local_name in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18700

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-29 12:29 修改: 2024-11-21 03:56

binutils CVE-2018-18701 低危 2.25.1-31.base.el7 binutils: infinite recursion in next_is_type_qual and cplus_demangle_type functions in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18701

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-29 12:29 修改: 2024-11-21 03:56

binutils CVE-2018-19932 低危 2.25.1-31.base.el7 binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19932

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-12-07 07:29 修改: 2024-11-21 03:58

binutils CVE-2018-20002 低危 2.25.1-31.base.el7 binutils: memory leak in _bfd_generic_read_minisymbols function in syms.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20002

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-12-10 02:29 修改: 2024-11-21 04:00

binutils CVE-2018-20657 低危 2.25.1-31.base.el7 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

binutils CVE-2018-6323 低危 2.25.1-31.base.el7 binutils: Integer overflow in elf_object_p function in elfcode.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6323

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-26 08:29 修改: 2024-11-21 04:10

binutils CVE-2018-6759 低危 2.25.1-31.base.el7 binutils: Unchecked strnlen in opncls.c:bfd_get_debug_link_info_1() can allow lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6759

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-06 21:29 修改: 2024-11-21 04:11

binutils CVE-2018-6872 低危 2.25.1-31.base.el7 binutils: out of bounds read in elf_parse_notes function in elf.c file in libbfd library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6872

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-09 06:29 修改: 2024-11-21 04:11

binutils CVE-2018-7208 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: Improper bounds check in coffgen.c:coff_pointerize_aux() allows for denial of service when parsing a crafted COFF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7208

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-18 04:29 修改: 2024-11-21 04:11

binutils CVE-2018-7568 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: integer overflow via an ELF file with corrupt dwarf1 debug information in libbfd library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7568

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-28 21:29 修改: 2024-11-21 04:12

binutils CVE-2018-7569 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: integer underflow or overflow via an ELF file with a corrupt DWARF FORM block in libbfd library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7569

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-28 21:29 修改: 2024-11-21 04:12

binutils CVE-2018-7642 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: NULL pointer dereference in swap_std_reloc_in function in aoutx.h resulting in crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7642

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-02 15:29 修改: 2024-11-21 04:12

binutils CVE-2018-7643 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: Integer overflow in the display_debug_ranges function resulting in crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-7643

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-02 15:29 修改: 2024-11-21 04:12

binutils CVE-2018-8945 低危 2.25.1-31.base.el7 2.27-34.base.el7 binutils: Crash in elf.c:bfd_section_from_shdr() with crafted executable

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8945

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-22 21:29 修改: 2024-11-21 04:14

libssh2 CVE-2023-6918 低危 1.4.3-10.el7_2.1 libssh: Missing checks for return values for digests

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6918

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-19 00:15 修改: 2025-02-15 01:15

libssh2 CVE-2025-4878 低危 1.4.3-10.el7_2.1 libssh: Use of uninitialized variable in privatekey_from_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4878

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-07-22 15:15 修改: 2026-05-19 14:16

libssh2 CVE-2025-8277 低危 1.4.3-10.el7_2.1 libssh: Memory Exhaustion via Repeated Key Exchange in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8277

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-09 12:15 修改: 2026-05-19 14:16

binutils CVE-2019-1010204 低危 2.25.1-31.base.el7 binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010204

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:18

binutils CVE-2019-12972 低危 2.25.1-31.base.el7 binutils: out-of-bounds read in setup_group in bfd/elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12972

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-26 14:15 修改: 2024-11-21 04:23

binutils CVE-2019-14250 低危 2.25.1-31.base.el7 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

binutils CVE-2019-17450 低危 2.25.1-31.base.el7 binutils: denial of service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17450

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-10 17:15 修改: 2024-11-21 04:32

git CVE-2017-15298 低危 1.8.3.1-12.el7_4 git: Mishandling layers of tree objects

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15298

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-10-14 22:29 修改: 2025-04-20 01:37

git CVE-2023-25815 低危 1.8.3.1-12.el7_4 git: malicious placement of crafted messages when git was compiled with runtime prefix

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25815

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2023-04-25 20:15 修改: 2025-11-04 17:15

git CVE-2024-32020 低危 1.8.3.1-12.el7_4 git: insecure hardlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32020

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 19:15 修改: 2026-01-06 17:01

git CVE-2024-32021 低危 1.8.3.1-12.el7_4 git: symlink bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32021

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2024-05-14 20:15 修改: 2026-01-05 19:19

git CVE-2024-50349 低危 1.8.3.1-12.el7_4 git: Git does not sanitize URLs when asking for credentials interactively

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50349

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 19:15 修改: 2025-12-18 16:42

git CVE-2024-52006 低危 1.8.3.1-12.el7_4 git: Newline confusion in credential helpers can lead to credential exfiltration in git

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52006

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-01-14 19:15 修改: 2025-12-18 16:10

git CVE-2025-46835 低危 1.8.3.1-12.el7_4 git: Git GUI can create and overwrite files for which the user has write permission

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-46835

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2025-07-10 15:15 修改: 2026-04-15 00:35

libstdc++ CVE-2015-5276 低危 4.8.5-16.el7 gcc: Predictable randomness from std::random_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30

libstdc++ CVE-2016-2226 低危 4.8.5-16.el7 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4487 低危 4.8.5-16.el7 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4488 低危 4.8.5-16.el7 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4489 低危 4.8.5-16.el7 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4490 低危 4.8.5-16.el7 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4491 低危 4.8.5-16.el7 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4492 低危 4.8.5-16.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4493 低危 4.8.5-16.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2017-11671 低危 4.8.5-16.el7 4.8.5-28.el7 gcc: GCC generates incorrect code for RDRAND/RDSEED intrinsics

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11671

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-26 21:29 修改: 2025-04-20 01:37

libstdc++ CVE-2018-20657 低危 4.8.5-16.el7 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

libstdc++ CVE-2019-14250 低危 4.8.5-16.el7 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

libstdc++ CVE-2021-3826 低危 4.8.5-16.el7 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

libstdc++ CVE-2021-46195 低危 4.8.5-16.el7 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-14 20:15 修改: 2024-11-21 06:33

libstdc++ CVE-2022-27943 低危 4.8.5-16.el7 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56

binutils CVE-2019-17451 低危 2.25.1-31.base.el7 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17451

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-10 17:15 修改: 2024-11-21 04:32

binutils CVE-2020-16591 低危 2.25.1-31.base.el7 binutils: invalid read in process_symbol_table could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16591

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

binutils CVE-2020-16593 低危 2.25.1-31.base.el7 binutils: Null Pointer Dereference in scan_unit_for_symbols could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16593

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

binutils CVE-2020-16599 低危 2.25.1-31.base.el7 binutils: Null Pointer Dereference in _bfd_elf_get_symbol_version_string could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16599

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

libtasn1 CVE-2017-10790 低危 4.10-1.el7 libtasn1: NULL pointer dereference in the _asn1_check_identifier function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10790

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-02 03:29 修改: 2026-05-13 00:24

libtasn1 CVE-2017-6891 低危 4.10-1.el7 libtasn1: Stack-based buffer overflow in asn1_find_node()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6891

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-22 19:29 修改: 2026-05-13 00:24

libtasn1 CVE-2018-1000654 低危 4.10-1.el7 libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000654

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-20 19:31 修改: 2024-11-21 03:40

libtasn1 CVE-2025-13151 低危 4.10-1.el7 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-07 22:15 修改: 2026-02-02 19:27

binutils CVE-2020-35448 低危 2.25.1-31.base.el7 binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35448

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-27 04:15 修改: 2024-11-21 05:27

binutils CVE-2020-35493 低危 2.25.1-31.base.el7 binutils: heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35493

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2020-35494 低危 2.25.1-31.base.el7 binutils: usage of unitialized heap in tic4x_print_cond function in opcodes/tic4x-dis.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35494

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2020-35495 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in bfd_pef_parse_symbols function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2020-35496 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in bfd_pef_scan_start_address function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35496

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

libuuid CVE-2015-5218 低危 2.23.2-43.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

libuuid CVE-2021-37600 低危 2.23.2-43.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

binutils CVE-2020-35507 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in bfd_pef_parse_function_stubs function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35507

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2021-3826 低危 2.25.1-31.base.el7 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

binutils CVE-2022-38533 低危 2.25.1-31.base.el7 binutils: heap-based buffer overflow in bfd_getl32() when called by strip_main() in objcopy.c via a crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38533

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-26 00:15 修改: 2024-11-21 07:16

binutils CVE-2022-44840 低危 2.25.1-31.base.el7 binutils: heap-based buffer overflow in find_section_in_set() in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44840

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:28

python CVE-2018-1000030 低危 2.7.5-58.el7 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000030

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-08 17:29 修改: 2024-11-21 03:39

python CVE-2018-1060 低危 2.7.5-58.el7 2.7.5-76.el7 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1060

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-18 14:29 修改: 2024-11-21 03:59

python CVE-2019-9674 低危 2.7.5-58.el7 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-02-04 15:15 修改: 2025-12-31 00:55

python CVE-2021-3737 低危 2.7.5-58.el7 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-04 19:15 修改: 2025-12-17 22:15

python CVE-2024-0397 低危 2.7.5-58.el7 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-17 16:15 修改: 2026-04-15 00:35

python CVE-2024-4032 低危 2.7.5-58.el7 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-17 15:15 修改: 2026-04-15 00:35

python CVE-2024-5642 低危 2.7.5-58.el7 python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-27 21:15 修改: 2026-04-15 00:35

python CVE-2024-7592 低危 2.7.5-58.el7 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-19 19:15 修改: 2025-11-03 23:17

python CVE-2025-1795 低危 2.7.5-58.el7 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-28 19:15 修改: 2026-04-15 00:35

python CVE-2025-6075 低危 2.7.5-58.el7 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-31 17:15 修改: 2026-02-04 19:05

python CVE-2026-2297 低危 2.7.5-58.el7 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-04 23:16 修改: 2026-05-01 16:16

python CVE-2026-3479 低危 2.7.5-58.el7 python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-18 19:16 修改: 2026-04-07 18:16

binutils CVE-2022-47007 低危 2.25.1-31.base.el7 binutils: memory leak in stab_demangle_v3_arg() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47007

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

binutils CVE-2022-47008 低危 2.25.1-31.base.el7 binutils: memory leak in make_tempdir() and make_tempname() in bucomm.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47008

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

binutils CVE-2022-47010 低危 2.25.1-31.base.el7 binutils: memory leak in pr_function_type() in prdbg.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47010

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

binutils CVE-2022-47011 低危 2.25.1-31.base.el7 binutils: memory leak in parse_stab_struct_fields() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47011

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

binutils CVE-2023-1972 低危 2.25.1-31.base.el7 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-17 22:15 修改: 2025-01-22 20:15

binutils CVE-2023-25584 低危 2.25.1-31.base.el7 binutils: Out of bounds read in parse_module function in bfd/vms-alpha.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25584

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-14 21:15 修改: 2024-11-21 07:49

binutils CVE-2023-25585 低危 2.25.1-31.base.el7 binutils: Field `file_table` of `struct module *module` is uninitialized

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25585

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-14 21:15 修改: 2024-11-21 07:49

binutils CVE-2023-25588 低危 2.25.1-31.base.el7 binutils: Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25588

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-14 21:15 修改: 2024-11-21 07:49

binutils CVE-2024-57360 低危 2.25.1-31.base.el7 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-21 21:15 修改: 2026-04-15 00:35

binutils CVE-2025-11412 低危 2.25.1-31.base.el7 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-07 22:15 修改: 2026-05-12 13:16

binutils CVE-2025-11413 低危 2.25.1-31.base.el7 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-07 22:15 修改: 2026-05-12 13:16

binutils CVE-2025-11414 低危 2.25.1-31.base.el7 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-07 23:15 修改: 2026-05-12 13:16

binutils CVE-2025-11494 低危 2.25.1-31.base.el7 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-08 20:15 修改: 2026-05-12 13:16

binutils CVE-2025-11495 低危 2.25.1-31.base.el7 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-08 20:15 修改: 2026-05-12 13:16

binutils CVE-2025-1150 低危 2.25.1-31.base.el7 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-10 17:15 修改: 2025-03-11 19:01

binutils CVE-2025-1151 低危 2.25.1-31.base.el7 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-10 17:15 修改: 2025-03-04 17:16

glib2 CVE-2015-8386 低危 2.50.3-3.el7 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8386

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2017-11164 低危 2.50.3-3.el7 pcre: OP_KETRMAX feature in the match function in pcre_exec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-11 03:29 修改: 2025-04-20 01:37

glib2 CVE-2017-18267 低危 2.50.3-3.el7 2.56.1-2.el7 poppler: Infinite recursion in fofi/FoFiType1C.cc:FoFiType1C::cvtGlyph() function allows denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18267

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-10 15:29 修改: 2024-11-21 03:19

glib2 CVE-2017-7244 低危 2.50.3-3.el7 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7244

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

glib2 CVE-2017-7245 低危 2.50.3-3.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

glib2 CVE-2017-7246 低危 2.50.3-3.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

libvirt-libs CVE-2017-1000256 低危 3.2.0-14.el7_4.7 libvirt: TLS certificate verification disabled for clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000256

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-10-31 15:29 修改: 2025-04-20 01:37

libvirt-libs CVE-2018-1064 低危 3.2.0-14.el7_4.7 3.9.0-14.el7_5.4 libvirt: Incomplete fix for CVE-2018-5748 triggered by QEMU guest agent

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1064

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-03-28 18:29 修改: 2024-11-21 03:59

libvirt-libs CVE-2018-5748 低危 3.2.0-14.el7_4.7 3.9.0-14.el7_5.4 libvirt: Resource exhaustion via qemuMonitorIORead() method

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5748

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2018-01-25 16:29 修改: 2024-11-21 04:09

libvirt-libs CVE-2021-3631 低危 3.2.0-14.el7_4.7 libvirt: Insecure sVirt label generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3631

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-02 23:15 修改: 2024-11-21 06:22

libvirt-libs CVE-2021-3667 低危 3.2.0-14.el7_4.7 libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3667

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-02 23:15 修改: 2025-02-10 13:10

libvirt-libs CVE-2021-3975 低危 3.2.0-14.el7_4.7 libvirt: segmentation fault during VM shutdown can lead to vdsm hang

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3975

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23

libvirt-libs CVE-2022-0897 低危 3.2.0-14.el7_4.7 libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0897

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-25 19:15 修改: 2024-11-21 06:39

glib2 CVE-2018-10733 低危 2.50.3-3.el7 2.56.1-2.el7 libgxps: heap based buffer over read in ft_font_face_hash function of gxps-fonts.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10733

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-04 17:29 修改: 2024-11-21 03:41

glib2 CVE-2018-10767 低危 2.50.3-3.el7 2.56.1-2.el7 libgxps: Stack-based buffer overflow in calling glib in gxps_images_guess_content_type of gcontenttype.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10767

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-06 23:29 修改: 2024-11-21 03:42

glib2 CVE-2018-10768 低危 2.50.3-3.el7 2.56.1-2.el7 poppler: NULL pointer dereference in Annot.h:AnnotPath::getCoordsLength() allows for denial of service via crafted PDF

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10768

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-05-06 23:29 修改: 2024-11-21 03:42

glib2 CVE-2018-13988 低危 2.50.3-3.el7 2.56.1-2.el7 poppler: out of bounds read in pdfunite

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-13988

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-25 23:29 修改: 2024-11-21 03:48

glib2 CVE-2018-16429 低危 2.50.3-3.el7 glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16429

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-04 00:29 修改: 2024-11-21 03:52

glib2 CVE-2018-5818 低危 2.50.3-3.el7 2.56.1-5.el7 LibRaw: DoS in parse_rollei function in internal/dcraw_common.cpp

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5818

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-20 18:29 修改: 2024-11-21 04:09

glib2 CVE-2018-5819 低危 2.50.3-3.el7 2.56.1-5.el7 LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5819

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-02-20 18:29 修改: 2024-11-21 04:09

glib2 CVE-2019-13012 低危 2.50.3-3.el7 glib2: insecure permissions for files and directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13012

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-06-28 15:15 修改: 2024-11-21 04:24

glib2 CVE-2021-28153 低危 2.50.3-3.el7 glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28153

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-11 22:15 修改: 2024-11-21 05:59

glib2 CVE-2023-29499 低危 2.50.3-3.el7 glib: GVariant offset table entry size is not checked in is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29499

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-14 20:15 修改: 2024-11-21 07:57

libvirt-python CVE-2017-1000256 低危 3.2.0-3.el7_4.1 libvirt: TLS certificate verification disabled for clients

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000256

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-10-31 15:29 修改: 2025-04-20 01:37

libvirt-python CVE-2021-3631 低危 3.2.0-3.el7_4.1 libvirt: Insecure sVirt label generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3631

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-02 23:15 修改: 2024-11-21 06:22

libvirt-python CVE-2021-3667 低危 3.2.0-3.el7_4.1 libvirt: Improper locking on ACL failure in virStoragePoolLookupByTargetPath API

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3667

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-02 23:15 修改: 2025-02-10 13:10

libvirt-python CVE-2021-3975 低危 3.2.0-3.el7_4.1 libvirt: segmentation fault during VM shutdown can lead to vdsm hang

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3975

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23

libvirt-python CVE-2022-0897 低危 3.2.0-3.el7_4.1 libvirt: missing locking in nwfilterConnectNumOfNWFilters can lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0897

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2022-03-25 19:15 修改: 2024-11-21 06:39

glib2 CVE-2023-32611 低危 2.50.3-3.el7 glib: g_variant_byteswap() can take a long time with some non-normal inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32611

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-14 20:15 修改: 2024-11-21 08:03

glib2 CVE-2023-32636 低危 2.50.3-3.el7 glib: Timeout in fuzz_variant_text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32636

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-14 20:15 修改: 2024-11-21 08:03

glib2 CVE-2023-32665 低危 2.50.3-3.el7 glib: GVariant deserialisation does not match spec for non-normal data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32665

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-09-14 20:15 修改: 2024-11-21 08:03

glib2 CVE-2025-3360 低危 2.50.3-3.el7 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-07 13:15 修改: 2026-04-15 00:35

glib2 CVE-2025-7039 低危 2.50.3-3.el7 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-09-03 02:15 修改: 2026-06-02 14:16

glib2 CVE-2026-0988 低危 2.50.3-3.el7 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-21 12:15 修改: 2026-04-24 21:16

glib2 CVE-2026-1485 低危 2.50.3-3.el7 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 14:15 修改: 2026-04-15 00:35

binutils CVE-2025-1152 低危 2.25.1-31.base.el7 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32

binutils CVE-2025-1153 低危 2.25.1-31.base.el7 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-10 19:15 修改: 2025-04-04 23:15

binutils CVE-2025-11839 低危 2.25.1-31.base.el7 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-16 14:15 修改: 2026-05-12 13:16

binutils CVE-2025-11840 低危 2.25.1-31.base.el7 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-16 16:15 修改: 2026-05-12 13:16

binutils CVE-2025-3198 低危 2.25.1-31.base.el7 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-04-04 02:15 修改: 2026-05-12 13:17

binutils CVE-2025-66861 低危 2.25.1-31.base.el7 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:36

binutils CVE-2025-66862 低危 2.25.1-31.base.el7 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:36

binutils CVE-2025-66863 低危 2.25.1-31.base.el7 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:38

binutils CVE-2025-66864 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:40

binutils CVE-2025-66865 低危 2.25.1-31.base.el7 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:42

binutils CVE-2025-66866 低危 2.25.1-31.base.el7 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:43

binutils CVE-2025-69644 低危 2.25.1-31.base.el7 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42

binutils CVE-2025-69645 低危 2.25.1-31.base.el7 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08

binutils CVE-2025-69646 低危 2.25.1-31.base.el7 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59

python-libs CVE-2018-1000030 低危 2.7.5-58.el7 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000030

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-02-08 17:29 修改: 2024-11-21 03:39

python-libs CVE-2018-1060 低危 2.7.5-58.el7 2.7.5-76.el7 python: DOS via regular expression catastrophic backtracking in apop() method in pop3lib

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1060

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-18 14:29 修改: 2024-11-21 03:59

python-libs CVE-2019-9674 低危 2.7.5-58.el7 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-02-04 15:15 修改: 2025-12-31 00:55

python-libs CVE-2021-3737 低危 2.7.5-58.el7 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-04 19:15 修改: 2025-12-17 22:15

python-libs CVE-2024-0397 低危 2.7.5-58.el7 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-17 16:15 修改: 2026-04-15 00:35

python-libs CVE-2024-4032 低危 2.7.5-58.el7 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-17 15:15 修改: 2026-04-15 00:35

python-libs CVE-2024-5642 低危 2.7.5-58.el7 python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-06-27 21:15 修改: 2026-04-15 00:35

python-libs CVE-2024-7592 低危 2.7.5-58.el7 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-19 19:15 修改: 2025-11-03 23:17

python-libs CVE-2025-1795 低危 2.7.5-58.el7 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-28 19:15 修改: 2026-04-15 00:35

python-libs CVE-2025-6075 低危 2.7.5-58.el7 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-10-31 17:15 修改: 2026-02-04 19:05

python-libs CVE-2026-2297 低危 2.7.5-58.el7 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-04 23:16 修改: 2026-05-01 16:16

python-libs CVE-2026-3479 低危 2.7.5-58.el7 python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-18 19:16 修改: 2026-04-07 18:16

binutils CVE-2025-69647 低危 2.25.1-31.base.el7 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44

binutils CVE-2025-69648 低危 2.25.1-31.base.el7 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43

binutils CVE-2025-69649 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:51

binutils CVE-2025-69650 低危 2.25.1-31.base.el7 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-06 19:16 修改: 2026-03-19 13:16

binutils CVE-2025-69651 低危 2.25.1-31.base.el7 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16

binutils CVE-2025-69652 低危 2.25.1-31.base.el7 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49

bind-license CVE-2013-5661 低危 32:9.9.4-50.el7 DNS response rate limiting can simplify cache poisoning attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-5661

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-05 19:15 修改: 2024-11-21 01:57

bind-license CVE-2016-6170 低危 32:9.9.4-50.el7 bind: Improper restriction of zone size limit

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6170

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-07-06 14:59 修改: 2026-05-06 22:30

bind-license CVE-2018-5745 低危 32:9.9.4-50.el7 32:9.11.4-16.P2.el7 bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-09 16:15 修改: 2024-11-21 04:09

bzip2-libs CVE-2016-3189 低危 1.0.6-13.el7 bzip2: heap use after free in bzip2recover

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3189

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-30 17:59 修改: 2026-05-06 22:30

ca-certificates CVE-2023-37920 低危 2017.2.14-71.el7 python-certifi: Removal of e-Tugra root certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37920

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-07-25 21:15 修改: 2025-02-13 13:50

bind-license CVE-2019-6465 低危 32:9.9.4-50.el7 32:9.11.4-16.P2.el7 bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6465

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-10-09 16:15 修改: 2024-11-21 04:46

avahi-libs CVE-2017-6519 低危 0.6.31-17.el7 0.6.31-20.el7 avahi: Multicast DNS responds to unicast queries outside of local network

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6519

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2017-05-01 01:59 修改: 2026-05-13 00:24

bash CVE-2019-18276 低危 4.2.46-28.el7 bash: when effective UID is not equal to its real UID the saved UID is not dropped

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18276

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-28 01:15 修改: 2025-06-09 16:15

coreutils CVE-2014-9471 低危 8.22-18.el7 coreutils: memory corruption flaw in parse_datetime()

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9471

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-01-16 16:59 修改: 2026-05-06 22:30

coreutils CVE-2015-4041 低危 8.22-18.el7 coreutils: heap buffer overflow in sort(1) keycompare_mb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-4041

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-24 17:15 修改: 2024-11-21 02:30

coreutils CVE-2015-4042 低危 8.22-18.el7 coreutils: possible buffer overflow in keycompare_mb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-4042

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-24 17:15 修改: 2024-11-21 02:30

binutils CVE-2014-9939 低危 2.25.1-31.base.el7 binutils: buffer overflow in ihex.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9939

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-21 06:59 修改: 2026-05-13 00:24

binutils CVE-2015-8538 低危 2.25.1-31.base.el7 libdwarf: Out-of-bounds read in dwarf_leb.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8538

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-07 20:29 修改: 2026-05-13 00:24

binutils CVE-2016-2226 低危 2.25.1-31.base.el7 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

cpio CVE-2015-1197 低危 2.11-24.el7 cpio: directory traversal through symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1197

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-19 15:59 修改: 2026-05-06 22:30

cpio CVE-2016-2037 低危 2.11-24.el7 cpio: out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2037

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-02-22 15:59 修改: 2026-05-06 22:30

cpio CVE-2023-7216 低危 2.11-24.el7 CPIO: extraction allows symlinks which enables Remote Command Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7216

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-05 15:15 修改: 2026-02-25 19:29

glibc CVE-2014-4043 低危 2.17-196.el7 glibc: posix_spawn_file_actions_addopen fails to copy the path argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-4043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-10-06 23:55 修改: 2026-05-06 22:30

libxml2 CVE-2017-18258 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Unrestricted memory usage in xz_head() function in xzlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18258

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-08 17:29 修改: 2024-11-21 03:19

libxml2 CVE-2017-5969 低危 2.9.1-6.el7_2.3 libxml2: Null pointer dereference in xmlSaveDoc implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5969

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2 CVE-2017-8872 低危 2.9.1-6.el7_2.3 libxml2: Out-of-bounds read in htmlParseTryOrFinish

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8872

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-10 05:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-9048 低危 2.9.1-6.el7_2.3 libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9048

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2018-14567 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Infinite loop caused by incorrect error detection during LZMA decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14567

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-16 20:29 修改: 2024-11-21 03:49

libxml2 CVE-2023-45322 低危 2.9.1-6.el7_2.3 libxml2: use-after-free in xmlUnlinkNode() in tree.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-06 22:15 修改: 2025-11-03 21:16

libxml2 CVE-2024-34459 低危 2.9.1-6.el7_2.3 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-14 15:39 修改: 2025-11-04 22:16

libxml2 CVE-2025-27113 低危 2.9.1-6.el7_2.3 libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27113

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

libxml2 CVE-2025-6170 低危 2.9.1-6.el7_2.3 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2 CVE-2026-0989 低危 2.9.1-6.el7_2.3 libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2 CVE-2026-0992 低危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XML catalogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

glibc CVE-2014-9402 低危 2.17-196.el7 2.17-222.el7 glibc: denial of service in getnetbyname function

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-24 15:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2015-5745 低危 10:2.8.0-2.el7 kernel: qemu buffer overflow in virtio-serial

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-23 20:15 修改: 2024-11-21 02:33

qemu-guest-agent CVE-2015-6815 低危 10:2.8.0-2.el7 qemu: net: e1000: infinite loop issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-6815

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-31 22:15 修改: 2024-11-21 02:35

qemu-guest-agent CVE-2015-6855 低危 10:2.8.0-2.el7 Qemu: ide: divide by zero issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-6855

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-06 21:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2015-7549 低危 10:2.8.0-2.el7 Qemu: pci: null pointer dereference issue

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-7549

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-30 14:29 修改: 2025-04-20 01:37

qemu-guest-agent CVE-2015-8558 低危 10:2.8.0-2.el7 Qemu: usb: infinite loop in ehci_advance_state results in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8558

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-05-23 19:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2015-8567 低危 10:2.8.0-2.el7 Qemu: net: vmxnet3: host memory leakage

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8567

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-13 17:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2015-8568 低危 10:2.8.0-2.el7 Qemu: net: vmxnet3: host memory leakage

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8568

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-11 19:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2015-8613 低危 10:2.8.0-2.el7 Qemu: scsi: stack based buffer overflow in megasas_ctrl_get_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8613

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-11 19:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2016-10155 低危 10:2.8.0-2.el7 Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10155

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-15 15:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2016-1922 低危 10:2.8.0-2.el7 Qemu: i386: null pointer dereference in vapic_write()

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1922

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-29 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-2198 低危 10:2.8.0-2.el7 Qemu: usb: ehci null pointer dereference in ehci_caps_write

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2198

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-29 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-2391 低危 10:2.8.0-2.el7 Qemu: usb: multiple eof_timers in ohci module leads to null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2391

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-2392 低危 10:2.8.0-2.el7 Qemu: usb: null pointer dereference in remote NDIS control message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2392

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-2538 低危 10:2.8.0-2.el7 Qemu: usb: integer overflow in remote NDIS control message handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2538

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-2841 低危 10:2.8.0-2.el7 Qemu: net: ne2000: infinite loop in ne2000_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2841

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-2858 低危 10:2.8.0-2.el7 Qemu: rng-random: arbitrary stack based allocation leading to corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2858

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-04-07 19:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-4037 低危 10:2.8.0-2.el7 Qemu: usb: Infinite loop vulnerability in usb_ehci using siTD process

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4037

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-05-23 19:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-4453 低危 10:2.8.0-2.el7 Qemu: display: vmsvga: infinite loop in vmsvga_fifo_run() routine

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4453

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-06-01 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-6834 低危 10:2.8.0-2.el7 Qemu: net: vmxnet3: an infinite loop during packet fragmentation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6834

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-10 00:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-6836 低危 10:2.8.0-2.el7 Qemu: net: vmxnet: Information leakage in vmxnet3_complete_packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6836

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-10 00:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-6888 低危 10:2.8.0-2.el7 Qemu: net: vmxnet: integer overflow in packet initialisation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6888

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-10 00:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-7116 低危 10:2.8.0-2.el7 Qemu: 9p: directory traversal flaw in 9p virtio backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7116

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-10 00:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-7421 低危 10:2.8.0-2.el7 Qemu: scsi: pvscsi: infinite loop when processing IO requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7421

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-10 00:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-7907 低危 10:2.8.0-2.el7 Qemu: net: inifinte loop in imx_fec_do_tx() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7907

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-10-05 16:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-7908 低危 10:2.8.0-2.el7 Qemu: net: Infinite loop in mcf_fec_do_tx()

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7908

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-10-05 16:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-7909 低危 10:2.8.0-2.el7 Qemu: net: pcnet: infinite loop in pcnet_rdra_addr()

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7909

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-10-05 16:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-8576 低危 10:2.8.0-2.el7 Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8576

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-11-04 21:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-8669 低危 10:2.8.0-2.el7 Qemu: char: divide by zero error in serial_update_parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8669

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-11-04 21:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-8909 低危 10:2.8.0-2.el7 Qemu: audio: intel-hda: infinite loop in processing dma buffer stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8909

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-11-04 21:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-8910 低危 10:2.8.0-2.el7 Qemu: net: rtl8139: infinite loop while transmit in C+ mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8910

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-11-04 21:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9102 低危 10:2.8.0-2.el7 Qemu: 9pfs: memory leakage when creating extended attribute

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9102

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-09 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9103 低危 10:2.8.0-2.el7 Qemu: 9pfs: information leakage via xattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9103

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-09 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9104 低危 10:2.8.0-2.el7 Qemu: 9pfs: integer overflow leading to OOB access

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9104

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-09 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9105 低危 10:2.8.0-2.el7 Qemu: 9pfs: memory leakage in v9fs_link

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9105

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-09 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9106 低危 10:2.8.0-2.el7 Qemu: 9pfs: memory leakage in v9fs_write

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9106

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-09 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9907 低危 10:2.8.0-2.el7 Qemu: usb: redirector: memory leakage when destroying redirector

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9907

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-23 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9911 低危 10:2.8.0-2.el7 Qemu: usb: ehci: memory leakage in ehci_init_transfer

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9911

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-23 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9921 低危 10:2.8.0-2.el7 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9921

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-23 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2016-9922 低危 10:2.8.0-2.el7 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9922

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-27 15:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2016-9923 低危 10:2.8.0-2.el7 Qemu: char: use-after-free issue during hotplug and unplugging device

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9923

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-23 22:59 修改: 2026-05-06 22:30

qemu-guest-agent CVE-2017-10806 低危 10:2.8.0-2.el7 Qemu: usb-redirect: stack buffer overflow in debug logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10806

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-02 19:29 修改: 2025-04-20 01:37

qemu-guest-agent CVE-2017-11434 低危 10:2.8.0-2.el7 Qemu: slirp: out-of-bounds read while parsing dhcp options

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11434

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-25 18:29 修改: 2025-04-20 01:37

qemu-guest-agent CVE-2017-13673 低危 10:2.8.0-2.el7 QEMU: VGA: reachable assert failure during display update

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13673

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 16:29 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2017-18043 低危 10:2.8.0-2.el7 Qemu: integer overflow in ROUND_UP macro could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-31 20:29 修改: 2024-11-21 03:19

qemu-guest-agent CVE-2017-5579 低危 10:2.8.0-2.el7 Qemu: serial: host memory leakage 16550A UART emulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5579

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-15 15:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2017-5973 低危 10:2.8.0-2.el7 Qemu: usb: infinite loop while doing control transfer in xhci_kick_epctx

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5973

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-27 15:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2017-6414 低危 10:2.8.0-2.el7 Qemu: libcacard: host memory leakage while creating new APDU

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6414

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-15 14:59 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2017-8309 低危 10:2.8.0-2.el7 Qemu: audio: host memory leakage via capture buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8309

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-23 04:29 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2017-9373 低危 10:2.8.0-2.el7 Qemu: ide: ahci host memory leakage during hotunplug

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9373

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-16 22:29 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2017-9374 低危 10:2.8.0-2.el7 Qemu: usb: ehci host memory leakage during hotunplug

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9374

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-16 22:29 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2017-9375 低危 10:2.8.0-2.el7 Qemu: usb: xhci infinite recursive call via xhci_kick_ep

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9375

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-16 22:29 修改: 2026-05-13 00:24

qemu-guest-agent CVE-2018-12617 低危 10:2.8.0-2.el7 Qemu: qemu-guest-agent: Integer overflow causes segmentation fault in qmp_guest_file_read()

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12617

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-06-21 18:29 修改: 2024-11-21 03:45

qemu-guest-agent CVE-2018-5683 低危 10:2.8.0-2.el7 Qemu: Out-of-bounds read in vga_draw_text routine

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5683

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-01-23 18:29 修改: 2024-11-21 04:09

qemu-guest-agent CVE-2019-13164 低危 10:2.8.0-2.el7 Qemu: qemu-bridge-helper ACL can be bypassed when names are too long

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13164

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-03 14:15 修改: 2024-11-21 04:24

qemu-guest-agent CVE-2020-11947 低危 10:2.8.0-2.el7 QEMU: heap buffer overflow in iscsi_aio_ioctl_cb() in block/iscsi.c may lead to information disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11947

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-31 01:15 修改: 2024-11-21 04:58

qemu-guest-agent CVE-2020-14394 低危 10:2.8.0-2.el7 QEMU: infinite loop in xhci_ring_chain_length() in hw/usb/hcd-xhci.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14394

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-17 21:15 修改: 2024-11-21 05:03

qemu-guest-agent CVE-2020-15469 低危 10:2.8.0-2.el7 QEMU: MMIO ops null pointer dereference may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15469

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-07-02 20:15 修改: 2024-11-21 05:05

qemu-guest-agent CVE-2020-25084 低危 10:2.8.0-2.el7 QEMU: usb: use-after-free issue while setting up packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25084

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-09-25 05:15 修改: 2024-11-21 05:17

qemu-guest-agent CVE-2020-25723 低危 10:2.8.0-2.el7 QEMU: assertion failure through usb_packet_unmap() in hw/usb/hcd-ehci.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25723

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-02 01:15 修改: 2024-11-21 05:18

qemu-guest-agent CVE-2020-27617 低危 10:2.8.0-2.el7 QEMU: net: an assert failure via eth_get_gso_type

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27617

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-06 08:15 修改: 2024-11-21 05:21

qemu-guest-agent CVE-2020-29129 低危 10:2.8.0-2.el7 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29129

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-26 20:15 修改: 2024-11-21 05:23

qemu-guest-agent CVE-2020-29130 低危 10:2.8.0-2.el7 QEMU: slirp: out-of-bounds access while processing ARP/NCSI packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29130

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-11-26 20:15 修改: 2024-11-21 05:23

qemu-guest-agent CVE-2021-20196 低危 10:2.8.0-2.el7 QEMU: block: fdc: null pointer dereference may lead to guest crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20196

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-26 22:15 修改: 2024-11-21 05:46

qemu-guest-agent CVE-2021-20257 低危 10:2.8.0-2.el7 QEMU: net: e1000: infinite loop while processing transmit descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20257

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-16 15:15 修改: 2024-11-21 05:46

qemu-guest-agent CVE-2021-3416 低危 10:2.8.0-2.el7 QEMU: net: Infinite loop in loopback mode may lead to stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3416

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-18 20:15 修改: 2024-11-21 06:21

qemu-guest-agent CVE-2021-3507 低危 10:2.8.0-2.el7 QEMU: fdc: heap buffer overflow in DMA read data transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3507

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-06 16:15 修改: 2024-11-21 06:21

qemu-guest-agent CVE-2021-3527 低危 10:2.8.0-2.el7 QEMU: usb: unbounded stack allocation in usbredir

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3527

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-26 22:15 修改: 2024-11-21 06:21

qemu-guest-agent CVE-2021-3592 低危 10:2.8.0-2.el7 QEMU: slirp: invalid pointer initialization may lead to information disclosure (bootp)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3592

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-15 21:15 修改: 2024-11-21 06:21

qemu-guest-agent CVE-2021-3594 低危 10:2.8.0-2.el7 QEMU: slirp: invalid pointer initialization may lead to information disclosure (udp)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3594

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-15 21:15 修改: 2024-11-21 06:21

qemu-guest-agent CVE-2021-3595 低危 10:2.8.0-2.el7 QEMU: slirp: invalid pointer initialization may lead to information disclosure (tftp)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3595

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-15 21:15 修改: 2024-11-21 06:21

qemu-guest-agent CVE-2021-3735 低危 10:2.8.0-2.el7 QEMU: ahci: deadlock issue leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3735

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-26 16:15 修改: 2025-02-28 13:15

qemu-guest-agent CVE-2021-3930 低危 10:2.8.0-2.el7 QEMU: off-by-one error in mode_sense_page() in hw/scsi/scsi-disk.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3930

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-18 18:15 修改: 2024-11-21 06:22

qemu-guest-agent CVE-2021-4145 低危 10:2.8.0-2.el7 QEMU: NULL pointer dereference in mirror_wait_on_conflicts() in block/mirror.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4145

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-25 20:15 修改: 2024-11-21 06:36

qemu-guest-agent CVE-2022-26354 低危 10:2.8.0-2.el7 QEMU: vhost-vsock: missing virtqueue detach on error can lead to memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-26354

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-16 15:15 修改: 2024-11-21 06:53

qemu-guest-agent CVE-2024-8354 低危 10:2.8.0-2.el7 qemu-kvm: usb: assertion failure in usb_ep_get()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8354

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-09-19 11:15 修改: 2024-11-21 09:53

qemu-guest-agent CVE-2024-8612 低危 10:2.8.0-2.el7 qemu-kvm: information leak in virtio devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8612

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-09-20 18:15 修改: 2026-04-15 00:35

qemu-guest-agent CVE-2026-2243 低危 10:2.8.0-2.el7 qemu-kvm: Heap buffer out-of-bounds read in VMDK compressed grain parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2243

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-19 18:25 修改: 2026-04-15 00:35

readline CVE-2016-7091 低危 6.2-10.el7 sudo: Possible info leak via INPUTRC

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7091

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-12-22 21:59 修改: 2026-05-06 22:30

glibc CVE-2015-5180 低危 2.17-196.el7 2.17-222.el7 glibc: DNS resolver NULL pointer dereference with crafted record type

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5180

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-27 20:29 修改: 2026-05-13 00:24

glibc CVE-2015-8982 低危 2.17-196.el7 glibc: multiple overflows in strxfrm()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8982

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-15 19:59 修改: 2026-05-13 00:24

glibc CVE-2015-8984 低危 2.17-196.el7 glibc: potential denial of service in internal_fnmatch()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8984

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc CVE-2015-8985 低危 2.17-196.el7 glibc: potential denial of service in pop_fail_stack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8985

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc CVE-2016-10228 低危 2.17-196.el7 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-02 01:59 修改: 2026-05-13 00:24

glibc CVE-2017-12132 低危 2.17-196.el7 2.17-222.el7 glibc: Fragmentation attacks possible when EDNS0 is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12132

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-01 16:29 修改: 2025-04-20 01:37

glibc CVE-2017-15671 低危 2.17-196.el7 glibc: Memory leak in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15671

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-20 17:29 修改: 2025-04-20 01:37

glibc CVE-2019-19126 低危 2.17-196.el7 2.17-317.el7 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-19 22:15 修改: 2024-11-21 04:34

glibc CVE-2020-27618 低危 2.17-196.el7 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-26 23:15 修改: 2025-06-09 16:15

rpm CVE-2021-20266 低危 4.11.3-25.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

glibc CVE-2021-33574 低危 2.17-196.el7 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-25 22:15 修改: 2024-11-21 06:09

glibc CVE-2024-33601 低危 2.17-196.el7 2.17-326.el7_9.3 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc CVE-2024-33602 低危 2.17-196.el7 2.17-326.el7_9.3 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc CVE-2025-15281 低危 2.17-196.el7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 14:16 修改: 2026-02-05 17:43

glibc CVE-2026-4438 低危 2.17-196.el7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:40

cracklib CVE-2016-6318 低危 2.9.0-11.el7 cracklib: Stack-based buffer overflow when parsing large GECOS field

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6318

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-07 19:28 修改: 2026-05-06 22:30

cracklib-dicts CVE-2016-6318 低危 2.9.0-11.el7 cracklib: Stack-based buffer overflow when parsing large GECOS field

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6318

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-07 19:28 修改: 2026-05-06 22:30

binutils CVE-2016-4487 低危 2.25.1-31.base.el7 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4488 低危 2.25.1-31.base.el7 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

rpm-build-libs CVE-2021-20266 低危 4.11.3-25.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

binutils CVE-2016-4489 低危 2.25.1-31.base.el7 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4490 低危 2.25.1-31.base.el7 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4491 低危 2.25.1-31.base.el7 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4492 低危 2.25.1-31.base.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4493 低危 2.25.1-31.base.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2017-12449 低危 2.25.1-31.base.el7 binutils: out of bounds heap read in _bfd_vms_save_sized_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12449

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12451 低危 2.25.1-31.base.el7 binutils: out of bounds stack read in _bfd_xcoff_read_ar_hdr function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12451

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12452 低危 2.25.1-31.base.el7 binutils: out of bounds heap read in bfd_mach_o_i386_canonicalize_one_reloc function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12452

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12453 低危 2.25.1-31.base.el7 binutils: out of bounds heap read in __bfd_vms_slurp_eeom function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12453

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

rpm-libs CVE-2021-20266 低危 4.11.3-25.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

binutils CVE-2017-12454 低危 2.25.1-31.base.el7 binutils: Arbitrary memory read in _bfd_vms_slurp_egs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12454

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12455 低危 2.25.1-31.base.el7 binutils: out of bounds heap read in evax_bfd_print_emh function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12455

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12456 低危 2.25.1-31.base.el7 binutils: out of bounds heap read in read_symbol_stabs_debugging_inf function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12456

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12457 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in bfd_make_section_with_flags function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12457

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12458 低危 2.25.1-31.base.el7 binutils: out of bounds heap read in nlm_swap_auxiliary_headers_in function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12458

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12799 低危 2.25.1-31.base.el7 binutils: Heap-based 1 byte buffer over-write in elf_read_notes function in bfd/elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12799

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-10 18:29 修改: 2026-05-13 00:24

binutils CVE-2017-12967 低危 2.25.1-31.base.el7 binutils: Stack-based buffer over-read in getsym function in tekhex.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12967

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-19 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-13710 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the setup_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13710

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-27 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-13716 低危 2.25.1-31.base.el7 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24

rpm-python CVE-2021-20266 低危 4.11.3-25.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

binutils CVE-2017-13757 低危 2.25.1-31.base.el7 binutils: heap-based buffer over-read in elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13757

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 23:29 修改: 2026-05-13 00:24

binutils CVE-2017-14128 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in the decode_line_info function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14128

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-04 20:29 修改: 2026-05-13 00:24

binutils CVE-2017-14129 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in the read_section function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14129

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-04 20:29 修改: 2026-05-13 00:24

binutils CVE-2017-14130 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in the _bfd_elf_parse_attributes function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14130

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-04 20:29 修改: 2026-05-13 00:24

binutils CVE-2017-14529 低危 2.25.1-31.base.el7 binutils: heap-based buffer over-read in bfd_getl16 function in peXXigen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14529

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-18 00:29 修改: 2026-05-13 00:24

binutils CVE-2017-14729 低危 2.25.1-31.base.el7 binutils: Heap buffer overflow in the *_get_synthetic_symtab functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-25 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-14745 低危 2.25.1-31.base.el7 binutils: Integer overflow in the *_get_synthetic_symtab functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14745

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-26 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-14930 低危 2.25.1-31.base.el7 binutils: Memory leak in decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14930

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-18258 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Unrestricted memory usage in xz_head() function in xzlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18258

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-08 17:29 修改: 2024-11-21 03:19

libxml2-python CVE-2017-5969 低危 2.9.1-6.el7_2.3 libxml2: Null pointer dereference in xmlSaveDoc implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5969

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2-python CVE-2017-8872 低危 2.9.1-6.el7_2.3 libxml2: Out-of-bounds read in htmlParseTryOrFinish

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8872

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-10 05:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-9048 低危 2.9.1-6.el7_2.3 libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9048

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2018-14567 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Infinite loop caused by incorrect error detection during LZMA decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14567

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-16 20:29 修改: 2024-11-21 03:49

libxml2-python CVE-2023-45322 低危 2.9.1-6.el7_2.3 libxml2: use-after-free in xmlUnlinkNode() in tree.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-06 22:15 修改: 2025-11-03 21:16

libxml2-python CVE-2024-34459 低危 2.9.1-6.el7_2.3 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-14 15:39 修改: 2025-11-04 22:16

libxml2-python CVE-2025-27113 低危 2.9.1-6.el7_2.3 libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27113

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

libxml2-python CVE-2025-6170 低危 2.9.1-6.el7_2.3 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2-python CVE-2026-0989 低危 2.9.1-6.el7_2.3 libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2-python CVE-2026-0992 低危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XML catalogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

binutils CVE-2017-14932 低危 2.25.1-31.base.el7 binutils: Infinite loop in the decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14932

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14933 低危 2.25.1-31.base.el7 binutils: Infinite loop in read_formatted_entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14933

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

setup CVE-2018-1113 低危 2.8.71-7.el7 2.8.71-10.el7 setup: nologin listed in /etc/shells violates security expectations

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1113

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-03 01:29 修改: 2024-11-21 03:59

shadow-utils CVE-2023-4641 低危 2:4.1.5.1-24.el7 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-27 16:15 修改: 2025-11-03 20:16

shadow-utils CVE-2024-56433 低危 2:4.1.5.1-24.el7 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-12-26 09:15 修改: 2026-04-15 00:35

binutils CVE-2017-14934 低危 2.25.1-31.base.el7 binutils: Infinite loop in process_debug_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14934

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14938 低危 2.25.1-31.base.el7 binutils: Excessive memory allocation in _bfd_elf_slurp_version_tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14939 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in the decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14939

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14940 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the scan_unit_for_symbols

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14940

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14974 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the *_get_synthetic_symtab functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14974

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-02 01:29 修改: 2026-05-13 00:24

glibc-common CVE-2014-4043 低危 2.17-196.el7 glibc: posix_spawn_file_actions_addopen fails to copy the path argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-4043

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2014-10-06 23:55 修改: 2026-05-06 22:30

ncurses CVE-2017-11112 低危 5.9-13.20130511.el7 ncurses: Illegal address access in append_acs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses CVE-2017-11113 低危 5.9-13.20130511.el7 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses CVE-2017-13728 低危 5.9-13.20130511.el7 ncurses: Infinite loop in the next_char function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13729 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the _nc_save_str function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13730 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function _nc_read_entry_source()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13731 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function postprocess_termcap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13732 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function dump_uses()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13733 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function fmt_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13734 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function _nc_safe_strcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-16879 低危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow in the _nc_write_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

ncurses CVE-2018-19211 低危 5.9-13.20130511.el7 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses CVE-2020-19185 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses CVE-2020-19186 低危 5.9-13.20130511.el7 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses CVE-2020-19187 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses CVE-2020-19188 低危 5.9-13.20130511.el7 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses CVE-2020-19189 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

sqlite CVE-2016-6153 低危 3.7.17-8.el7 sqlite: Tempdir selection vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6153

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-09-26 16:59 修改: 2026-05-06 22:30

sqlite CVE-2017-10989 低危 3.7.17-8.el7 sqlite: Heap-buffer overflow in the getNodeSize function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10989

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-07 12:29 修改: 2026-05-13 00:24

sqlite CVE-2017-13685 低危 3.7.17-8.el7 sqlite: Local DoS via dump_callback function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13685

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

sqlite CVE-2017-15286 低危 3.7.17-8.el7 sqlite: NULL pointer dereference in tableColumnList

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15286

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-12 08:29 修改: 2025-04-20 01:37

sqlite CVE-2018-8740 低危 3.7.17-8.el7 sqlite: NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8740

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-17 00:29 修改: 2024-11-21 04:14

sqlite CVE-2019-19244 低危 3.7.17-8.el7 sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19244

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-25 20:15 修改: 2024-11-21 04:34

sqlite CVE-2020-35525 低危 3.7.17-8.el7 sqlite: Null pointer derreference in src/select.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-01 18:15 修改: 2024-11-21 05:27

sqlite CVE-2021-45346 低危 3.7.17-8.el7 sqlite: crafted SQL query allows a malicious user to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-02-14 19:15 修改: 2024-11-21 06:32

sqlite CVE-2024-0232 低危 3.7.17-8.el7 sqlite: use-after-free bug in jsonParseAddNodeArray

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0232

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-01-16 14:15 修改: 2024-11-21 08:46

sqlite CVE-2025-70873 低危 3.7.17-8.el7 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-12 19:16 修改: 2026-04-16 21:15

ncurses CVE-2020-19190 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses CVE-2021-39537 低危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19

ncurses CVE-2023-50495 低危 5.9-13.20130511.el7 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-12 15:15 修改: 2025-11-04 19:16

glibc-common CVE-2014-9402 低危 2.17-196.el7 2.17-222.el7 glibc: denial of service in getnetbyname function

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9402

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-02-24 15:59 修改: 2026-05-06 22:30

glibc-common CVE-2015-5180 低危 2.17-196.el7 2.17-222.el7 glibc: DNS resolver NULL pointer dereference with crafted record type

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5180

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-06-27 20:29 修改: 2026-05-13 00:24

glibc-common CVE-2015-8982 低危 2.17-196.el7 glibc: multiple overflows in strxfrm()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8982

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-15 19:59 修改: 2026-05-13 00:24

glibc-common CVE-2015-8984 低危 2.17-196.el7 glibc: potential denial of service in internal_fnmatch()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8984

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc-common CVE-2015-8985 低危 2.17-196.el7 glibc: potential denial of service in pop_fail_stack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8985

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc-common CVE-2016-10228 低危 2.17-196.el7 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-02 01:59 修改: 2026-05-13 00:24

ncurses-base CVE-2017-11112 低危 5.9-13.20130511.el7 ncurses: Illegal address access in append_acs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-base CVE-2017-11113 低危 5.9-13.20130511.el7 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-base CVE-2017-13728 低危 5.9-13.20130511.el7 ncurses: Infinite loop in the next_char function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13729 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the _nc_save_str function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13730 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function _nc_read_entry_source()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13731 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function postprocess_termcap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13732 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function dump_uses()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13733 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function fmt_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13734 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function _nc_safe_strcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-16879 低危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow in the _nc_write_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

ncurses-base CVE-2018-19211 低危 5.9-13.20130511.el7 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-base CVE-2020-19185 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

systemd CVE-2016-6349 低危 219-42.el7 oci-register-machine: information exposure for docker containers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6349

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 20:59 修改: 2026-05-13 00:24

systemd CVE-2018-16888 低危 219-42.el7 219-67.el7 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-14 22:29 修改: 2024-11-21 03:53

systemd CVE-2019-20386 低危 219-42.el7 219-78.el7 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-21 06:15 修改: 2025-06-09 16:15

systemd CVE-2019-3815 低危 219-42.el7 219-62.el7_6.3 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-28 15:29 修改: 2024-11-21 04:42

ncurses-base CVE-2020-19186 低危 5.9-13.20130511.el7 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19187 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19188 低危 5.9-13.20130511.el7 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19189 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19190 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-base CVE-2021-39537 低危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19

ncurses-base CVE-2023-50495 低危 5.9-13.20130511.el7 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-12 15:15 修改: 2025-11-04 19:16

glibc-common CVE-2017-12132 低危 2.17-196.el7 2.17-222.el7 glibc: Fragmentation attacks possible when EDNS0 is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12132

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-01 16:29 修改: 2025-04-20 01:37

glibc-common CVE-2017-15671 低危 2.17-196.el7 glibc: Memory leak in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15671

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-20 17:29 修改: 2025-04-20 01:37

glibc-common CVE-2019-19126 低危 2.17-196.el7 2.17-317.el7 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-19 22:15 修改: 2024-11-21 04:34

glibc-common CVE-2020-27618 低危 2.17-196.el7 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-02-26 23:15 修改: 2025-06-09 16:15

glibc-common CVE-2021-33574 低危 2.17-196.el7 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-05-25 22:15 修改: 2024-11-21 06:09

glibc-common CVE-2024-33601 低危 2.17-196.el7 2.17-326.el7_9.3 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

ncurses-libs CVE-2017-11112 低危 5.9-13.20130511.el7 ncurses: Illegal address access in append_acs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-libs CVE-2017-11113 低危 5.9-13.20130511.el7 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-libs CVE-2017-13728 低危 5.9-13.20130511.el7 ncurses: Infinite loop in the next_char function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13729 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the _nc_save_str function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13730 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function _nc_read_entry_source()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13731 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function postprocess_termcap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13732 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function dump_uses()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13733 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function fmt_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

systemd-libs CVE-2016-6349 低危 219-42.el7 oci-register-machine: information exposure for docker containers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6349

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-03-29 20:59 修改: 2026-05-13 00:24

systemd-libs CVE-2018-16888 低危 219-42.el7 219-67.el7 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-14 22:29 修改: 2024-11-21 03:53

systemd-libs CVE-2019-20386 低危 219-42.el7 219-78.el7 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-21 06:15 修改: 2025-06-09 16:15

systemd-libs CVE-2019-3815 低危 219-42.el7 219-62.el7_6.3 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-01-28 15:29 修改: 2024-11-21 04:42

ncurses-libs CVE-2017-13734 低危 5.9-13.20130511.el7 ncurses: Illegal address access in the function _nc_safe_strcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-16879 低危 5.9-13.20130511.el7 ncurses: Stack-based buffer overflow in the _nc_write_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

ncurses-libs CVE-2018-19211 低危 5.9-13.20130511.el7 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-libs CVE-2020-19185 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19186 低危 5.9-13.20130511.el7 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19187 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19188 低危 5.9-13.20130511.el7 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

tar CVE-2018-20482 低危 2:1.26-32.el7 tar: Infinite read loop in sparse_dump_region function in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-12-26 18:29 修改: 2024-11-21 04:01

tar CVE-2019-9923 低危 2:1.26-32.el7 tar: null-pointer dereference in pax_decode_header in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9923

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-03-22 08:29 修改: 2025-08-06 22:15

tar CVE-2021-20193 低危 2:1.26-32.el7 tar: Memory leak in read_header() in list.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20193

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-03-26 17:15 修改: 2025-05-05 14:15

tar CVE-2023-39804 低危 2:1.26-32.el7 tar: Incorrectly handled extension attributes in PAX archives can lead to a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-03-27 04:15 修改: 2025-11-04 19:15

ncurses-libs CVE-2020-19189 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19190 低危 5.9-13.20130511.el7 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

trousers CVE-2020-24330 低危 0.3.14-2.el7 trousers: fails to drop the root gid privilege when no longer needed

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24330

镜像层: sha256:6dfcd2d2b638a775e71dee5498022d7b089993519f23261995c0006553775b7f

发布日期: 2020-08-13 17:15 修改: 2024-11-21 05:14

ncurses-libs CVE-2021-39537 低危 5.9-13.20130511.el7 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19

ncurses-libs CVE-2023-50495 低危 5.9-13.20130511.el7 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-12-12 15:15 修改: 2025-11-04 19:16

glibc-common CVE-2024-33602 低危 2.17-196.el7 2.17-326.el7_9.3 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc-common CVE-2025-15281 低危 2.17-196.el7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-20 14:16 修改: 2026-02-05 17:43

glibc-common CVE-2026-4438 低危 2.17-196.el7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:40

util-linux CVE-2015-5218 低危 2.23.2-43.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

util-linux CVE-2021-37600 低危 2.23.2-43.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

binutils CVE-2017-15020 低危 2.25.1-31.base.el7 binutils: Heap-based buffer overflow in parse_die

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15020

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15021 低危 2.25.1-31.base.el7 binutils: Heap-based buffer over-read in bfd_get_debug_link_info_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15021

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15022 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in dwarf2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15022

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15023 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in read_formatted_entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15024 低危 2.25.1-31.base.el7 binutils: Infinite recursion in find_abstract_instance_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15024

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15025 低危 2.25.1-31.base.el7 binutils: Divide-by-zero in decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15025

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15225 低危 2.25.1-31.base.el7 binutils: Memory leak in _bfd_dwarf2_cleanup_debug_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15225

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-10 23:29 修改: 2026-05-13 00:24

gnupg2 CVE-2014-3591 低危 2.0.22-4.el7 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3591

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:08

gnupg2 CVE-2015-0837 低危 2.0.22-4.el7 libgcrypt: last-level cache side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0837

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:23

gnupg2 CVE-2015-1606 低危 2.0.22-4.el7 gnupg2: invalid memory read using a garbled keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1606

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-20 19:15 修改: 2024-11-21 02:25

gnupg2 CVE-2015-1607 低危 2.0.22-4.el7 gnupg2: memcpy with overlapping ranges (keybox_search.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1607

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-11-20 19:15 修改: 2024-11-21 02:25

gnupg2 CVE-2018-9234 低危 2.0.22-4.el7 GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9234

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-04 00:29 修改: 2024-11-21 04:15

nspr CVE-2019-11727 低危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nspr CVE-2019-17023 低危 4.13.1-1.0.el7_3 4.25.0-2.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

gnupg2 CVE-2022-3219 低危 2.0.22-4.el7 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-23 20:15 修改: 2025-03-12 21:15

gnupg2 CVE-2025-30258 低危 2.0.22-4.el7 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-03-19 20:15 修改: 2025-10-16 16:53

gnupg2 CVE-2026-24883 低危 2.0.22-4.el7 GnuPG: GnuPG: Denial of service due to specially crafted signature packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24883

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-01-27 19:16 修改: 2026-02-06 18:06

binutils CVE-2017-15938 低危 2.25.1-31.base.el7 binutils: Invalid memory read in find_abstract_instance_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15938

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-27 21:29 修改: 2025-04-20 01:37

binutils CVE-2017-15939 低危 2.25.1-31.base.el7 binutils: NULL pointer dereference in the concat_filename

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15939

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-27 21:29 修改: 2025-04-20 01:37

binutils CVE-2017-15996 低危 2.25.1-31.base.el7 binutils: Excessive memory allocation in elfcomm.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15996

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-29 17:29 修改: 2025-04-20 01:37

binutils CVE-2017-16826 低危 2.25.1-31.base.el7 binutils: Invalid memory access in the coff_slurp_line_table function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16826

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16827 低危 2.25.1-31.base.el7 binutils: Invalid free in the aout_get_external_symbols function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16827

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16828 低危 2.25.1-31.base.el7 binutils: Integer overflow in the display_debug_frames function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16828

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16829 低危 2.25.1-31.base.el7 binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16829

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

curl CVE-2016-0755 低危 7.29.0-42.el7 curl: NTLM credentials not-checked for proxy connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-0755

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2016-01-29 20:59 修改: 2026-05-06 22:30

curl CVE-2016-8616 低危 7.29.0-42.el7 curl: Case insensitive password comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8616

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2016-8621 低危 7.29.0-42.el7 curl: curl_getdate out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8621

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

curl CVE-2016-8622 低危 7.29.0-42.el7 curl: URL unescape heap overflow via integer truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8622

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

curl CVE-2016-8623 低危 7.29.0-42.el7 curl: Use-after-free via shared cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8623

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2016-9586 低危 7.29.0-42.el7 curl: printf floating point buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9586

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-04-23 18:29 修改: 2024-11-21 03:01

curl CVE-2017-1000100 低危 7.29.0-42.el7 curl: TFTP sends more than buffer size

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000100

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

vim-minimal CVE-2017-1000382 低危 2:7.4.160-2.el7 vim: Ignores umask when creating a swap file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000382

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-10-31 20:29 修改: 2025-04-20 01:37

vim-minimal CVE-2017-11109 低危 2:7.4.160-2.el7 vim: Use-after-free via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11109

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

vim-minimal CVE-2017-17087 低危 2:7.4.160-2.el7 vim: Sets the group ownership of a .swp file to the editor's primary group

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17087

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-12-01 08:29 修改: 2025-04-20 01:37

vim-minimal CVE-2017-5953 低危 2:7.4.160-2.el7 vim: Tree length values not validated properly when handling a spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5953

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-10 07:59 修改: 2026-05-13 00:24

vim-minimal CVE-2017-6350 低危 2:7.4.160-2.el7 vim: Integer overflow at an unserialize_uep memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6350

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-02-27 07:59 修改: 2026-05-13 00:24

vim-minimal CVE-2021-3236 低危 2:7.4.160-2.el7 vim: NULL pointer dereference in ex_buffer_all method

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3236

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-08-11 14:15 修改: 2024-11-21 06:21

vim-minimal CVE-2021-3903 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3903

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-10-27 21:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3927 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow in gchar_cursor() in misc1.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3927

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-05 15:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3974 低危 2:7.4.160-2.el7 vim: Use after free in regexp_nfa.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3974

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-11-19 11:15 修改: 2024-11-21 06:23

vim-minimal CVE-2021-4069 低危 2:7.4.160-2.el7 vim: use-after-free in ex_open() in src/ex_docmd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4069

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-06 12:15 修改: 2024-11-21 06:36

vim-minimal CVE-2021-4166 低危 2:7.4.160-2.el7 vim: out-of-bounds read in do_arg_all() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4166

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-12-25 19:15 修改: 2024-11-21 06:37

vim-minimal CVE-2022-0351 低危 2:7.4.160-2.el7 vim: access of memory location before start of buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0351

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-01-25 18:15 修改: 2025-11-03 21:15

vim-minimal CVE-2022-1154 低危 2:7.4.160-2.el7 vim: use after free in utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1154

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-03-30 12:15 修改: 2024-11-21 06:40

vim-minimal CVE-2022-1619 低危 2:7.4.160-2.el7 vim: heap-buffer-overflow in cmdline_erase_chars of ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1619

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-05-08 10:15 修改: 2024-11-21 06:41

vim-minimal CVE-2022-1720 低危 2:7.4.160-2.el7 vim: buffer over-read in grab_file_name() in findfile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1720

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-20 15:15 修改: 2024-11-21 06:41

vim-minimal CVE-2022-2124 低危 2:7.4.160-2.el7 vim: out of bounds read in current_quote()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2124

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-19 10:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2125 低危 2:7.4.160-2.el7 vim: Heap-based Buffer Overflow in get_lisp_indent()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2125

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-19 12:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2126 低危 2:7.4.160-2.el7 vim: out of bounds read in suggest_trie_walk()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2126

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-19 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2129 低危 2:7.4.160-2.el7 vim: out of bounds write in vim_regsub_both()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2129

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-19 19:15 修改: 2025-11-03 21:15

vim-minimal CVE-2022-2175 低危 2:7.4.160-2.el7 vim: buffer over-read in put_on_cmdline() at ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2175

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-23 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2182 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2182

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-23 18:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2183 低危 2:7.4.160-2.el7 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2183

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-23 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2206 低危 2:7.4.160-2.el7 vim: out-of-bound read in function msg_outtrans_attr

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2206

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-26 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2207 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow in function ins_bs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2207

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-27 12:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2208 低危 2:7.4.160-2.el7 vim: null pointer dereference in function diff_check

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2208

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-27 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2210 低危 2:7.4.160-2.el7 vim: out-of-bound write in function ml_append_int

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2210

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-27 16:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2231 低危 2:7.4.160-2.el7 vim: null pointer derefernce in function skipwhite may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2231

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-06-28 20:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2284 低危 2:7.4.160-2.el7 vim: out of bounds read in utfc_ptr2len() at mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2284

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-02 15:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2285 低危 2:7.4.160-2.el7 vim: integer overflow in del_typebuf() at getchar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2285

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-02 16:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2286 低危 2:7.4.160-2.el7 vim: out of bounds read in ins_bytes() at change.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2286

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-02 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2287 低危 2:7.4.160-2.el7 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2287

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-02 22:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2288 低危 2:7.4.160-2.el7 vim: out of bounds write in parse_command_modifiers() at ex_docmd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2288

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-03 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2289 低危 2:7.4.160-2.el7 vim: use after free in ex_diffgetput() at diff.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2289

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-03 15:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2343 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2343

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-08 18:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2344 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2344

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-08 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2345 低危 2:7.4.160-2.el7 vim: use-after-free in skipwhite() in charset.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2345

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-07-08 22:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2571 低危 2:7.4.160-2.el7 vim: Heap-based Buffer Overflow in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2571

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-01 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2580 低危 2:7.4.160-2.el7 vim: Out-of-bounds Read in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2580

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-01 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2581 低危 2:7.4.160-2.el7 vim: Out-of-bounds Read in vim src/regexp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2581

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-01 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2598 低危 2:7.4.160-2.el7 vim: Undefined Behavior for Input to API in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2598

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-01 15:15 修改: 2026-02-25 15:18

vim-minimal CVE-2022-2816 低危 2:7.4.160-2.el7 vim: out-of-bounds read in check_vim9_unlet() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2816

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-15 22:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2817 低危 2:7.4.160-2.el7 vim: heap use-after-free in string_quote() at src/strings.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2817

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-15 23:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2819 低危 2:7.4.160-2.el7 vim: heap buffer overflow in compile_lock_unlock() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2819

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-15 11:21 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2845 低危 2:7.4.160-2.el7 vim: Buffer Under-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2845

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-17 15:15 修改: 2026-02-25 15:19

vim-minimal CVE-2022-2849 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2849

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-17 18:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2862 低危 2:7.4.160-2.el7 vim: heap use-after-free in generate_PCALL() at src/vim9instr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2862

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-17 20:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2874 低危 2:7.4.160-2.el7 vim: NULL pointer dereference in generate_loadvar() in vim9compile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2874

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-18 16:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2889 低危 2:7.4.160-2.el7 vim: use-after-free in find_var_also_in_script() in evalvars.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2889

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-19 13:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2923 低危 2:7.4.160-2.el7 vim: null pointer dereference in function sug_filltree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2923

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-22 21:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2946 低危 2:7.4.160-2.el7 vim: use after free in function vim_vsnprintf_typval

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2946

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-23 17:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2980 低危 2:7.4.160-2.el7 vim: null pointer dereference in do_mouse() at src/mouse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2980

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-25 20:15 修改: 2024-11-21 07:02

vim-minimal CVE-2022-3037 低危 2:7.4.160-2.el7 vim: use after free in function qf_buf_add_line( )

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3037

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-08-30 21:15 修改: 2024-11-21 07:18

vim-minimal CVE-2022-3153 低危 2:7.4.160-2.el7 vim: null pointer dereference in vim_regcomp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3153

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-08 15:15 修改: 2024-11-21 07:18

vim-minimal CVE-2022-3234 低危 2:7.4.160-2.el7 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3234

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-17 22:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3235 低危 2:7.4.160-2.el7 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3235

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-18 20:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3256 低危 2:7.4.160-2.el7 vim: use-after-free in movemark() at mark.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3256

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-22 13:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3296 低危 2:7.4.160-2.el7 vim: stack buffer overflow in ex_finally() in ex_eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3296

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-25 17:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3352 低危 2:7.4.160-2.el7 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3352

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-09-29 12:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3520 低危 2:7.4.160-2.el7 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3520

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-12-02 19:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3591 低危 2:7.4.160-2.el7 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3591

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-12-02 17:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3705 低危 2:7.4.160-2.el7 vim: a use after free in the function qf_update_buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3705

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-10-26 20:15 修改: 2024-11-21 07:20

vim-minimal CVE-2022-4292 低危 2:7.4.160-2.el7 vim: use-after-free in did_set_spelllang() in src/spell.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4292

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2022-12-05 19:15 修改: 2024-11-21 07:34

vim-minimal CVE-2023-0049 低危 2:7.4.160-2.el7 vim: out-of-bounds read in function build_stl_str_hl

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0049

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-04 16:15 修改: 2025-01-17 20:15

vim-minimal CVE-2023-0051 低危 2:7.4.160-2.el7 vim: heap-based buffer overflow in msg_puts_printf() in message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0051

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-04 18:15 修改: 2024-11-21 07:36

vim-minimal CVE-2023-0054 低危 2:7.4.160-2.el7 vim: out-of-bounds write in do_string_sub() in eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0054

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-04 19:15 修改: 2025-11-03 21:15

vim-minimal CVE-2023-0288 低危 2:7.4.160-2.el7 vim: a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0288

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-13 16:15 修改: 2024-11-21 07:36

vim-minimal CVE-2023-0433 低危 2:7.4.160-2.el7 vim: reading past the end of a line when formatting text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0433

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-21 15:15 修改: 2024-11-21 07:37

vim-minimal CVE-2023-0512 低危 2:7.4.160-2.el7 vim: divide by zero in adjust_skipcol() at move.ca

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0512

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-01-30 16:15 修改: 2024-11-21 07:37

vim-minimal CVE-2023-1127 低危 2:7.4.160-2.el7 vim: Divide By Zero in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1127

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-01 19:15 修改: 2024-11-21 07:38

vim-minimal CVE-2023-1170 低危 2:7.4.160-2.el7 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1170

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-03 23:15 修改: 2024-11-21 07:38

vim-minimal CVE-2023-1175 低危 2:7.4.160-2.el7 vim: Incorrect Calculation of Buffer Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1175

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-04 16:15 修改: 2025-11-03 21:15

vim-minimal CVE-2023-1264 低危 2:7.4.160-2.el7 vim: NULL pointer dereference issue in utfc_ptr2len

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1264

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-03-07 22:15 修改: 2024-11-21 07:38

vim-minimal CVE-2023-2609 低危 2:7.4.160-2.el7 vim: NULL Pointer Dereference in get_register() at register.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2609

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-09 18:15 修改: 2024-11-21 07:58

vim-minimal CVE-2023-2610 低危 2:7.4.160-2.el7 vim: integer overflow vulnerability in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2610

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-05-09 22:15 修改: 2025-11-03 21:15

vim-minimal CVE-2023-46246 低危 2:7.4.160-2.el7 vim: Integer Overflow in :history command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46246

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-27 19:15 修改: 2025-02-13 18:15

vim-minimal CVE-2023-48231 低危 2:7.4.160-2.el7 vim: use after free in win_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48231

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48232 低危 2:7.4.160-2.el7 vim: floating point exception in adjust_plines_for_skipcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48232

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48233 低危 2:7.4.160-2.el7 vim: overflow with count for :s command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48233

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48234 低危 2:7.4.160-2.el7 vim: overflow in nv_z_get_count

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48234

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48235 低危 2:7.4.160-2.el7 vim: overflow in ex address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48235

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48236 低危 2:7.4.160-2.el7 vim: overflow in get_number

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48236

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48237 低危 2:7.4.160-2.el7 vim: buffer overflow in shift_line

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48237

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48706 低危 2:7.4.160-2.el7 vim: use-after-free in ex_substitute in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48706

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-11-22 22:15 修改: 2024-11-21 08:32

vim-minimal CVE-2023-5344 低危 2:7.4.160-2.el7 vim: Heap-based Buffer Overflow in trunc_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5344

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-02 20:15 修改: 2025-11-03 21:16

vim-minimal CVE-2023-5441 低危 2:7.4.160-2.el7 vim: NULL pointer dereference in screen_line() in src/screen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5441

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-05 21:15 修改: 2024-11-21 08:41

vim-minimal CVE-2023-5535 低危 2:7.4.160-2.el7 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5535

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-10-11 20:15 修改: 2024-11-21 08:41

vim-minimal CVE-2024-22667 低危 2:7.4.160-2.el7 vim: Stack buffer over flow in did_set_langmap function in map.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22667

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-02-05 08:15 修改: 2025-11-04 22:15

vim-minimal CVE-2024-41965 低危 2:7.4.160-2.el7 vim: Double-Free Vulnerability in Vim Could Cause Application Crashes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41965

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-01 22:15 修改: 2024-11-21 09:33

vim-minimal CVE-2024-43374 低危 2:7.4.160-2.el7 vim: use-after-free in alist_add() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43374

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-16 02:15 修改: 2026-06-09 18:28

vim-minimal CVE-2024-43802 低危 2:7.4.160-2.el7 vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43802

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-26 19:15 修改: 2026-04-15 00:35

vim-minimal CVE-2024-45306 低危 2:7.4.160-2.el7 vim: heap-buffer-overflow in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45306

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-09-02 18:15 修改: 2024-11-21 09:37

vim-minimal CVE-2024-47814 低危 2:7.4.160-2.el7 vim: use-after-free when closing buffers in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47814

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-10-07 22:15 修改: 2025-11-03 21:16

vim-minimal CVE-2025-1215 低危 2:7.4.160-2.el7 vim: vim main.c memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1215

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-12 19:15 修改: 2025-08-13 17:28

vim-minimal CVE-2025-22134 低危 2:7.4.160-2.el7 vim: heap-buffer-overflow with visual mode in Vim < 9.1.1003

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22134

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-13 21:15 修改: 2026-06-09 18:28

vim-minimal CVE-2025-24014 低危 2:7.4.160-2.el7 vim: segmentation fault in win_line() in Vim < 9.1.1043

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24014

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-01-20 23:15 修改: 2025-08-14 01:40

vim-minimal CVE-2025-26603 低危 2:7.4.160-2.el7 vim: heap-use-after-free in function str_to_reg in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26603

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2025-02-18 19:15 修改: 2025-08-18 18:23

vim-minimal CVE-2026-26269 低危 2:7.4.160-2.el7 vim: Netbeans specialKeys stack buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26269

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-13 20:17 修改: 2026-02-18 21:29

vim-minimal CVE-2026-28422 低危 2:7.4.160-2.el7 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28422

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-27 22:16 修改: 2026-03-04 20:44

curl CVE-2017-7407 低危 7.29.0-42.el7 curl: --write-out out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7407

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-04-03 20:59 修改: 2026-05-13 00:24

curl CVE-2018-1000121 低危 7.29.0-42.el7 7.29.0-51.el7 curl: LDAP NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000121

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-03-14 18:29 修改: 2024-11-21 03:39

curl CVE-2018-14618 低危 7.29.0-42.el7 7.29.0-51.el7_6.3 curl: NTLM password overflow via integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14618

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-09-05 19:29 修改: 2024-11-21 03:49

curl CVE-2018-16842 低危 7.29.0-42.el7 7.29.0-54.el7 curl: Heap-based buffer over-read in the curl tool warning formatting

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16842

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-10-31 19:29 修改: 2024-11-21 03:53

curl CVE-2018-20483 低危 7.29.0-42.el7 wget: Information exposure in set_file_metadata function in xattr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20483

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2018-12-26 18:29 修改: 2024-11-21 04:01

curl CVE-2019-5436 低危 7.29.0-42.el7 7.29.0-57.el7 curl: TFTP receive heap buffer overflow in tftp_receive_packet() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5436

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-05-28 19:29 修改: 2026-04-15 21:17

curl CVE-2020-8231 低危 7.29.0-42.el7 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38

curl CVE-2021-22898 低危 7.29.0-42.el7 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-06-11 16:15 修改: 2026-04-16 14:16

curl CVE-2021-22925 低危 7.29.0-42.el7 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2021-08-05 21:15 修改: 2026-04-16 17:16

nss CVE-2019-11727 低危 3.28.4-8.el7 3.53.1-3.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss CVE-2019-17023 低危 3.28.4-8.el7 3.53.1-3.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

nss CVE-2020-12413 低危 3.28.4-8.el7 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2023-02-16 22:15 修改: 2025-03-19 16:15

nss CVE-2024-7531 低危 3.28.4-8.el7 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2024-08-06 13:15 修改: 2025-03-19 16:15

zlib CVE-2016-9840 低危 1.2.7-17.el7 1.2.7-21.el7_9.1 zlib: Out-of-bound pointer arithmetic in inftrees.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9840

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2017-05-23 04:29 修改: 2026-05-13 00:24

zlib CVE-2026-27171 低危 1.2.7-17.el7 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:129b697f70e96b903f2025859be4444624b4a87394e113918a7f855e97a12ae2

发布日期: 2026-02-18 04:16 修改: 2026-03-25 21:27

Python (python-pkg)
低危漏洞:1 中危漏洞:9 高危漏洞:14 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Django CVE-2014-0472 严重 1.5.5 1.4.11, 1.5.6, 1.6.3 python-django: unexpected code execution using reverse()

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0472

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-04-23 15:55 修改: 2026-05-06 22:30

Django CVE-2014-1418 严重 1.5.5 1.4.13, 1.5.8, 1.6.5, 1.7b4 Django: cached data possibly served to the wrong session

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-1418

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-05-16 15:55 修改: 2026-05-06 22:30

Django CVE-2019-19844 严重 1.5.5 1.11.27, 2.2.9, 3.0.1 Django: crafted email address allows account takeover

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19844

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2019-12-18 19:15 修改: 2024-11-21 04:35

Django CVE-2020-7471 严重 1.5.5 1.11.28, 2.2.10, 3.0.3 django: potential SQL injection via StringAgg(delimiter)

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7471

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2020-02-03 12:15 修改: 2024-11-21 05:37

Django CVE-2025-64459 严重 1.5.5 5.2.8, 5.1.14, 4.2.26 django: Django SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64459

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2025-11-05 15:15 修改: 2025-11-10 18:25

Django CVE-2014-0473 高危 1.5.5 1.4.11, 1.5.6, 1.6.3 python-django: caching of anonymous pages could reveal CSRF token

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0473

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-04-23 15:55 修改: 2026-05-06 22:30

Django CVE-2014-0474 高危 1.5.5 1.4.11, 1.5.6, 1.6.3 python-django: MySQL typecasting

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0474

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-04-23 15:55 修改: 2026-05-06 22:30

Django CVE-2014-0480 高危 1.5.5 1.4.14, 1.5.9, 1.6.6 Django: reverse() can generate URLs pointing to other hosts, leading to phishing attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0480

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-08-26 14:55 修改: 2026-05-06 22:30

Django CVE-2014-0481 高危 1.5.5 1.4.14, 1.5.9, 1.6.6 Django: file upload denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0481

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-08-26 14:55 修改: 2026-05-06 22:30

Django CVE-2014-3730 高危 1.5.5 1.4.13, 1.5.8, 1.6.5, 1.7b4 Django: insufficient URL validation could lead to redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3730

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-05-16 15:55 修改: 2026-05-06 22:30

Django CVE-2015-5143 高危 1.5.5 1.4.21, 1.7.9, 1.8.3 Django: possible DoS by filling session store

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5143

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2015-07-14 17:59 修改: 2026-05-06 22:30

Django CVE-2015-5144 高危 1.5.5 1.4.21, 1.7.9, 1.8.3 Django: possible header injection due to validators accepting newlines in input

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5144

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2015-07-14 17:59 修改: 2026-05-06 22:30

Django CVE-2016-7401 高危 1.5.5 1.8.15, 1.9.10 python-django: CSRF protection bypass on a site with Google Analytics

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7401

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2016-10-03 18:59 修改: 2026-05-06 22:30

Django CVE-2022-36359 高危 1.5.5 3.2.15, 4.0.7 An issue was discovered in the HTTP FileResponse class in Django 3.2 b ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36359

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2022-08-03 14:15 修改: 2024-11-21 07:12

Django CVE-2025-57833 高危 1.5.5 4.2.24, 5.1.12, 5.2.6 django: Django SQL injection in FilteredRelation column aliases

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-57833

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2025-09-03 21:15 修改: 2025-11-04 22:16

Django CVE-2025-64458 高危 1.5.5 5.2.8, 5.1.14, 4.2.26 Django: Denial-of-service vulnerability in Django on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64458

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2025-11-05 15:15 修改: 2025-11-10 18:33

gunicorn CVE-2018-1000164 高危 18.0 19.5.0 python-gunicorn: Improper neutralization of CRLF Sequences http/wsgi.py:process_headers() can allow an attacker to cause a server to return arbitrary HTTP headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000164

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2018-04-18 19:29 修改: 2024-11-21 03:39

gunicorn CVE-2024-1135 高危 18.0 22.0.0 python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1135

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2024-04-16 00:15 修改: 2026-04-15 00:35

gunicorn CVE-2024-6827 高危 18.0 22.0.0 gunicorn: HTTP Request Smuggling in benoitc/gunicorn

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6827

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2025-03-20 10:15 修改: 2026-04-15 00:35

Django CVE-2015-2317 中危 1.5.5 1.4.20, 1.6.11, 1.7.7, 1.8c1 Django: possible XSS attack via user-supplied redirect URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2317

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2015-03-25 14:59 修改: 2026-05-06 22:30

Django CVE-2016-2512 中危 1.5.5 1.8.10, 1.9.3 python-django: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2512

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2016-04-08 15:59 修改: 2026-05-06 22:30

Django CVE-2016-6186 中危 1.5.5 1.8.14, 1.9.8, 1.10rc1 django: XSS in admin's add/change related popup

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6186

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2016-08-05 15:59 修改: 2026-05-06 22:30

Django CVE-2021-33203 中危 1.5.5 2.2.24, 3.1.12, 3.2.4 django: Potential directory traversal via ``admindocs``

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33203

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2021-06-08 18:15 修改: 2024-11-21 06:08

Django CVE-2024-45231 中危 1.5.5 5.1.1, 5.0.9, 4.2.16 python-django: Potential user email enumeration via response status on password reset

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45231

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2024-10-08 16:15 修改: 2025-03-17 18:15

Django CVE-2025-48432 中危 1.5.5 5.2.2, 5.1.10, 4.2.22 django: Django Path Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48432

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2025-06-05 03:15 修改: 2025-10-15 17:47

Django CVE-2014-0482 中危 1.5.5 1.4.14, 1.5.9, 1.6.6, 1.7c3 Django: RemoteUserMiddleware session hijacking

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0482

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-08-26 14:55 修改: 2026-05-06 22:30

Django CVE-2014-0483 中危 1.5.5 1.4.14, 1.5.9, 1.6.6, 1.7c3 Django: data leakage via querystring manipulation in admin

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-0483

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2014-08-26 14:55 修改: 2026-05-06 22:30

Django CVE-2015-2241 中危 1.5.5 1.7.6, 1.8b2 Django: XSS attack via properties in ModelAdmin.readonly_fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2241

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2015-03-12 14:59 修改: 2026-05-06 22:30

Django CVE-2016-2513 低危 1.5.5 1.8.10, 1.9.3 python-django: User enumeration through timing difference on password hasher work factor upgrade

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2513

镜像层: sha256:3b35da0b618d25ca6884139dfc41f1f4992929645fcf96928967a1f2a74b6d4c

发布日期: 2016-04-08 15:59 修改: 2026-05-06 22:30

/webvirtmgr/console/cert.pem ()
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息