docker.io/rockylinux/rockylinux:10.2-minimal linux/amd64

docker.io/rockylinux/rockylinux:10.2-minimal - Trivy安全扫描结果 扫描时间: 2026-09-09 10:55
全部漏洞信息
低危漏洞:0 中危漏洞:14 高危漏洞:36 严重漏洞:0

系统OS: rocky 10.2 扫描引擎: Trivy 扫描时间: 2026-09-09 10:55

docker.io/rockylinux/rockylinux:10.2-minimal (rocky 10.2) (rocky)
低危漏洞:0 中危漏洞:14 高危漏洞:36 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl CVE-2026-8927 高危 8.12.1-4.el10 8.12.1-4.el10_2.4 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
gnutls CVE-2026-33845 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-04-30 18:16 修改: 2026-09-04 13:19
gnutls CVE-2026-33846 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-04 10:15 修改: 2026-09-04 13:19
gnutls CVE-2026-3832 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-04-30 18:16 修改: 2026-09-01 13:19
gnutls CVE-2026-3833 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-04-30 18:16 修改: 2026-09-03 15:17
gnutls CVE-2026-42009 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-18 13:16 修改: 2026-09-04 13:19
gnutls CVE-2026-42010 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-07 12:16 修改: 2026-09-04 13:19
gnutls CVE-2026-42011 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-07 15:16 修改: 2026-09-03 15:17
gnutls CVE-2026-42012 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19
gnutls CVE-2026-42013 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17
gnutls CVE-2026-42014 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-16 02:16 修改: 2026-09-01 13:19
gnutls CVE-2026-42015 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19
gnutls CVE-2026-5260 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17
gnutls CVE-2026-5419 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-01 21:16 修改: 2026-09-01 13:19
libcurl CVE-2026-8927 高危 8.12.1-4.el10 8.12.1-4.el10_2.4 curl: Information disclosure due to uncleared proxy authentication state

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8927

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:21
libssh-config CVE-2026-15370 高危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: stack buffer overflow in SFTP server longname construction

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15370

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 09:16 修改: 2026-08-17 22:16
libssh-config CVE-2026-59842 高危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: information disclosure via short GSSAPI Curve25519 public key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59842

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 12:18 修改: 2026-08-19 05:17
libssh-config CVE-2026-59849 高危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: denial of service via automatic certificate authentication loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59849

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 15:16 修改: 2026-08-19 05:17
libssh-config CVE-2026-59851 高危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: authentication bypass via missing GSSAPI principal check

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59851

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 15:16 修改: 2026-08-17 22:17
openssl-libs CVE-2026-34180 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34181 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34182 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34183 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42764 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42766 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42767 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42768 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42769 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42770 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45445 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45446 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45447 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-09-07 13:20
openssl-libs CVE-2026-7383 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-9076 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
sqlite-libs CVE-2026-11822 高危 3.46.1-5.el10_1 3.46.1-6.el10_2 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
sqlite-libs CVE-2026-11824 高危 3.46.1-5.el10_1 3.46.1-6.el10_2 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
libssh-config CVE-2026-59846 中危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: information disclosure via ProxyCommand %r username expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59846

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 13:17 修改: 2026-09-01 21:18
libssh-config CVE-2026-59847 中危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: integrity downgrade via OpenSSL AES-GCM tag verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59847

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 14:16 修改: 2026-09-04 19:23
libssh-config CVE-2026-59848 中危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: denial of service via SFTP responses with unknown request IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59848

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 14:16 修改: 2026-09-01 21:18
libssh-config CVE-2026-59850 中危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: use-after-free via data callbacks on closed channels

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59850

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 15:16 修改: 2026-09-01 21:18
libxml2 CVE-2026-11979 中危 2.12.5-10.el10 2.12.5-10.el10_2.3 libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11979

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-29 14:16 修改: 2026-06-30 20:22
libattr CVE-2026-54371 中危 2.5.2-5.el10 2.6.0-1.el10_2 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18
gzip CVE-2026-41991 中危 1.13-3.el10 1.13-4.el10_2 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
gzip CVE-2026-41992 中危 1.13-3.el10 1.13-4.el10_2 gzip: gzip: Information disclosure via global buffer overflow in LZH decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-29 12:16 修改: 2026-08-27 13:17
libssh-config CVE-2026-59843 中危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: denial of service via zero advertised channel packet size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59843

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18
openssl-libs CVE-2026-28390 中危 1:3.5.5-2.el10_2 1:3.5.5-3.el10_2 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
pam CVE-2026-54411 中危 1.6.1-9.el10 1.6.1-9.el10_2.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
pam-libs CVE-2026-54411 中危 1.6.1-9.el10 1.6.1-9.el10_2.1 linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libssh-config CVE-2026-59844 中危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: denial of service via oversized SFTP read length

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59844

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18
libssh-config CVE-2026-59845 中危 0.12.0-2.el10 0.12.0-3.el10_2 libssh: libssh: denial of service via unchecked ProxyCommand fork() failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59845

镜像层: sha256:ee551c7c76d501fb21e7d19d56cb9bbfa8c2d418337be898312abad165654cbe

发布日期: 2026-07-21 12:18 修改: 2026-09-01 21:18
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×