docker.io/openobserve/openobserve:v0.90.3 linux/amd64

docker.io/openobserve/openobserve:v0.90.3 - Trivy安全扫描结果 扫描时间: 2026-06-16 13:22
全部漏洞信息
低危漏洞:17 中危漏洞:9 高危漏洞:1 严重漏洞:0

系统OS: debian 13.5 扫描引擎: Trivy 扫描时间: 2026-06-16 13:22

docker.io/openobserve/openobserve:v0.90.3 (debian 13.5) (debian)
低危漏洞:17 中危漏洞:9 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssl3t64 CVE-2026-45447 高危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 15:16
libc6 CVE-2026-5450 中危 2.41-12+deb13u3 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc6 CVE-2026-5928 中危 2.41-12+deb13u3 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc6 CVE-2026-6238 中危 2.41-12+deb13u3 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-28 19:37 修改: 2026-05-04 17:57
libc6 CVE-2026-5435 中危 2.41-12+deb13u3 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38
libssl3t64 CVE-2026-34182 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 17:16
libssl3t64 CVE-2026-34183 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 16:17
libssl3t64 CVE-2026-42764 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-45445 中危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
zlib1g CVE-2026-27171 中危 1:1.3.dfsg+really1.3.1-1+b1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0

发布日期: 2026-02-18 04:16 修改: 2026-03-25 21:27
libc6 CVE-2019-9192 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-02-26 18:29 修改: 2024-11-21 04:51
libc6 CVE-2010-4756 低危 2.41-12+deb13u3 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6 CVE-2018-20796 低危 2.41-12+deb13u3 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:02
libc6 CVE-2019-1010022 低危 2.41-12+deb13u3 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc6 CVE-2019-1010023 低危 2.41-12+deb13u3 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc6 CVE-2019-1010024 低危 2.41-12+deb13u3 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libssl3t64 CVE-2026-34180 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-34181 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 17:16
libssl3t64 CVE-2026-42766 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-42767 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-42768 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-42769 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-42770 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-45446 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-7383 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-9076 低危 3.5.6-1~deb13u1 3.5.6-1~deb13u2 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:f7480f886f20e8ffccbb5196da285d5842f19cc8c264dfed5b3d8121103f04a0

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libc6 CVE-2019-1010025 低危 2.41-12+deb13u3 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17