docker.io/rockylinux/rockylinux:10.2 linux/arm64

docker.io/rockylinux/rockylinux:10.2 - Trivy安全扫描结果 扫描时间: 2026-07-30 20:09 温馨提示: 这是一个 linux/arm64 系统架构镜像
全部漏洞信息
低危漏洞:3 中危漏洞:24 高危漏洞:34 严重漏洞:0

系统OS: rocky 10.2 扫描引擎: Trivy 扫描时间: 2026-07-30 20:09

docker.io/rockylinux/rockylinux:10.2 (rocky 10.2) (rocky)
低危漏洞:3 中危漏洞:24 高危漏洞:34 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
expat CVE-2026-45186 高危 2.7.3-1.el10 2.7.3-1.el10_2.1 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-10 07:16 修改: 2026-07-24 20:10

glib2 CVE-2026-58016 高危 2.80.4-12.el10_2.13 2.80.4-12.el10_2.14 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-30 13:19 修改: 2026-07-28 18:17

gnutls CVE-2026-33845 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-30 18:16 修改: 2026-07-20 12:18

gnutls CVE-2026-33846 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-04 10:15 修改: 2026-07-20 12:18

gnutls CVE-2026-3832 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-30 18:16 修改: 2026-07-13 17:17

gnutls CVE-2026-3833 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-30 18:16 修改: 2026-07-22 16:17

gnutls CVE-2026-42009 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-18 13:16 修改: 2026-07-23 12:17

gnutls CVE-2026-42010 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-07 12:16 修改: 2026-07-23 12:17

gnutls CVE-2026-42011 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-07 15:16 修改: 2026-07-22 16:17

gnutls CVE-2026-42012 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10

gnutls CVE-2026-42013 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10

gnutls CVE-2026-42014 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-16 02:16 修改: 2026-07-22 16:17

gnutls CVE-2026-42015 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-26 22:16 修改: 2026-07-24 11:10

gnutls CVE-2026-5260 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-26 22:16 修改: 2026-07-24 12:10

gnutls CVE-2026-5419 高危 3.8.10-3.el10_1 3.8.10-4.el10_2 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-01 21:16 修改: 2026-07-22 08:10

libacl CVE-2026-54369 高危 2.3.2-4.el10 2.4.0-1.el10_2 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-29 14:16 修改: 2026-07-28 13:18

libacl CVE-2026-54370 高危 2.3.2-4.el10 2.4.0-1.el10_2 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22

openssl-libs CVE-2026-34180 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34181 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34182 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-34183 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42764 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42766 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42767 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42768 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42769 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-42770 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45445 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45446 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-45447 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-27 13:18

openssl-libs CVE-2026-7383 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-libs CVE-2026-9076 高危 1:3.5.5-2.el10_2 1:3.5.5-4.el10_2 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

python3 CVE-2026-15308 高危 3.12.13-2.el10_2 3.12.13-2.el10_2.1 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-07-09 17:16 修改: 2026-07-23 19:16

python3-libs CVE-2026-15308 高危 3.12.13-2.el10_2 3.12.13-2.el10_2.1 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-07-09 17:16 修改: 2026-07-23 19:16

libsolv CVE-2026-9149 中危 0.7.33-2.el10 0.7.33-5.el10_2 libsolv: Heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9149

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-21 00:16 修改: 2026-07-23 11:10

libsolv CVE-2026-9150 中危 0.7.33-2.el10 0.7.33-5.el10_2 libsolv: Stack-based buffer overflow in libsolv's Debian metadata parser when handling SHA384/SHA512 checksums

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9150

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-20 23:16 修改: 2026-07-23 15:10

glibc-minimal-langpack CVE-2026-6238 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

coreutils-single CVE-2025-5278 中危 9.5-7.el10 9.5-8.el10_2 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2025-05-27 21:15 修改: 2026-07-27 18:16

glibc CVE-2026-4046 中危 2.39-121.el10_2 2.39-124.el10_2 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc CVE-2026-5435 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc CVE-2026-5450 中危 2.39-121.el10_2 2.39-126.el10_2 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-5928 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc CVE-2026-6238 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-common CVE-2026-4046 中危 2.39-121.el10_2 2.39-124.el10_2 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc-common CVE-2026-5435 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-common CVE-2026-5450 中危 2.39-121.el10_2 2.39-126.el10_2 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-5928 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

glibc-common CVE-2026-6238 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-4046 中危 2.39-121.el10_2 2.39-124.el10_2 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18

glibc-minimal-langpack CVE-2026-5435 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19

glibc-minimal-langpack CVE-2026-5450 中危 2.39-121.el10_2 2.39-126.el10_2 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

openssl-libs CVE-2026-28390 中危 1:3.5.5-2.el10_2 1:3.5.5-3.el10_2 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

glibc-minimal-langpack CVE-2026-5928 中危 2.39-121.el10_2 2.39-128.el10_2 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19

libsolv CVE-2026-48864 中危 0.7.33-2.el10 0.7.33-5.el10_2 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-05-26 17:16 修改: 2026-07-27 18:16

vim-data CVE-2026-35177 中危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.3 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-06 18:16 修改: 2026-07-24 21:10

vim-data CVE-2026-41411 中危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.4 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

vim-minimal CVE-2026-35177 中危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.3 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-06 18:16 修改: 2026-07-24 21:10

vim-minimal CVE-2026-41411 中危 2:9.1.083-9.el10_2.2 2:9.1.083-9.el10_2.4 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46

libxml2 CVE-2024-34459 低危 2.12.5-10.el10 2.12.5-10.el10_2.1 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33

libxml2 CVE-2025-6170 低危 2.12.5-10.el10 2.12.5-10.el10_2.2 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2025-06-16 16:15 修改: 2026-07-27 18:16

libtasn1 CVE-2025-13151 低危 4.20.0-1.el10 4.20.0-5.el10_2 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:46e47f838e5fb6551270ff72fabd9140a25ec727be7e83add79c57cd6ce11c3e

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×