| expat |
CVE-2025-59375 |
高危 |
2.5.0-1.el9 |
2.5.0-5.el9_7.1 |
firefox: thunderbird: expat: libexpat in Expat allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59375
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-15 03:15 修改: 2026-06-17 09:46
|
| expat |
CVE-2026-45186 |
高危 |
2.5.0-1.el9 |
2.5.0-6.el9_8.1 |
libexpat: denial of service via crafted XML input
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-10 07:16 修改: 2026-06-30 03:20
|
| glibc |
CVE-2024-2961 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: Out of bounds write in iconv may lead to remote code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
|
| glibc |
CVE-2024-33599 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: stack-based buffer overflow in netgroup cache
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc |
CVE-2024-33600 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: null pointer dereferences after failed netgroup cache insertion
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc |
CVE-2024-33601 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: netgroup cache may terminate daemon on memory allocation failure
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc |
CVE-2024-33602 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: netgroup cache assumes NSS callback uses in-buffer strings
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-common |
CVE-2024-2961 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: Out of bounds write in iconv may lead to remote code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
|
| glibc-common |
CVE-2024-33599 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: stack-based buffer overflow in netgroup cache
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-common |
CVE-2024-33600 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: null pointer dereferences after failed netgroup cache insertion
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-common |
CVE-2024-33601 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: netgroup cache may terminate daemon on memory allocation failure
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-common |
CVE-2024-33602 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: netgroup cache assumes NSS callback uses in-buffer strings
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-minimal-langpack |
CVE-2024-2961 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: Out of bounds write in iconv may lead to remote code execution
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
|
| glibc-minimal-langpack |
CVE-2024-33599 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: stack-based buffer overflow in netgroup cache
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-minimal-langpack |
CVE-2024-33600 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: null pointer dereferences after failed netgroup cache insertion
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-minimal-langpack |
CVE-2024-33601 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: netgroup cache may terminate daemon on memory allocation failure
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| glibc-minimal-langpack |
CVE-2024-33602 |
高危 |
2.34-60.el9 |
2.34-100.el9_4.2 |
glibc: netgroup cache assumes NSS callback uses in-buffer strings
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
|
| gnupg2 |
CVE-2025-68973 |
高危 |
2.3.3-2.el9_0 |
2.3.3-5.el9_7 |
GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
|
| gnutls |
CVE-2026-33845 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-30 18:16 修改: 2026-07-13 17:17
|
| gnutls |
CVE-2026-33846 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-04 10:15 修改: 2026-07-13 17:17
|
| gnutls |
CVE-2026-3832 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-30 18:16 修改: 2026-07-13 17:17
|
| gnutls |
CVE-2026-3833 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-30 18:16 修改: 2026-07-13 22:16
|
| gnutls |
CVE-2026-42009 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-18 13:16 修改: 2026-07-14 12:17
|
| gnutls |
CVE-2026-42010 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Authentication Bypass via NUL Character in Username
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-07 12:16 修改: 2026-07-14 12:17
|
| gnutls |
CVE-2026-42011 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Security bypass due to incorrect name constraint handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-07 15:16 修改: 2026-07-13 17:17
|
| gnutls |
CVE-2026-42012 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-26 22:16 修改: 2026-07-13 17:17
|
| gnutls |
CVE-2026-42013 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-26 22:16 修改: 2026-07-13 17:17
|
| gnutls |
CVE-2026-42014 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-16 02:16 修改: 2026-07-13 21:16
|
| gnutls |
CVE-2026-42015 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-26 22:16 修改: 2026-07-13 17:17
|
| gnutls |
CVE-2026-5260 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Information disclosure via heap overread in RSA key exchange
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-05-26 22:16 修改: 2026-07-13 17:18
|
| gnutls |
CVE-2026-5419 |
高危 |
3.7.6-20.el9_2 |
3.8.10-4.el9_8 |
gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-01 21:16 修改: 2026-07-13 22:16
|
| krb5-libs |
CVE-2024-3596 |
高危 |
1.20.1-8.el9 |
1.21.1-4.el9_5 |
freeradius: forgery attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-07-09 12:15 修改: 2026-06-17 07:44
|
| krb5-libs |
CVE-2026-40355 |
高危 |
1.20.1-8.el9 |
1.21.1-10.el9_8 |
krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-28 06:16 修改: 2026-07-08 12:48
|
| krb5-libs |
CVE-2026-40356 |
高危 |
1.20.1-8.el9 |
1.21.1-10.el9_8 |
krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
|
| less |
CVE-2024-32487 |
高危 |
590-1.el9_0 |
590-4.el9_4 |
less: OS command injection
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-32487
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-04-13 15:15 修改: 2026-06-17 07:29
|
| libarchive |
CVE-2025-5914 |
高危 |
3.5.3-4.el9 |
3.5.3-6.el9_6 |
libarchive: Double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5914
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-09 20:15 修改: 2026-06-30 11:16
|
| libarchive |
CVE-2026-4111 |
高危 |
3.5.3-4.el9 |
3.5.3-7.el9_7 |
libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4111
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-13 19:55 修改: 2026-06-30 03:20
|
| libarchive |
CVE-2026-4424 |
高危 |
3.5.3-4.el9 |
3.5.3-9.el9_7 |
libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4424
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-19 15:16 修改: 2026-06-30 03:20
|
| libarchive |
CVE-2026-5121 |
高危 |
3.5.3-4.el9 |
3.5.3-9.el9_7 |
libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5121
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-30 08:16 修改: 2026-06-17 10:58
|
| libcap |
CVE-2026-4878 |
高危 |
2.48-8.el9 |
2.48-10.el9_7.1 |
libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-09 16:16 修改: 2026-07-14 12:17
|
| libnghttp2 |
CVE-2026-27135 |
高危 |
1.43.0-5.el9 |
1.43.0-6.el9_7.1 |
nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27135
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-18 18:16 修改: 2026-06-30 03:17
|
| libxml2 |
CVE-2024-56171 |
高危 |
2.9.13-3.el9_1 |
2.9.13-6.el9_5.2 |
libxml2: Use-After-Free in libxml2
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56171
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-02-18 22:15 修改: 2026-06-17 08:11
|
| libxml2 |
CVE-2025-24928 |
高危 |
2.9.13-3.el9_1 |
2.9.13-6.el9_5.2 |
libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24928
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-02-18 23:15 修改: 2026-06-17 08:59
|
| libxml2 |
CVE-2025-49794 |
高危 |
2.9.13-3.el9_1 |
2.9.13-10.el9_6 |
libxml: Heap use after free (UAF) leads to Denial of service (DoS)
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49794
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-16 16:15 修改: 2026-06-29 21:16
|
| libxml2 |
CVE-2025-49796 |
高危 |
2.9.13-3.el9_1 |
2.9.13-10.el9_6 |
libxml: Type confusion leads to Denial of service (DoS)
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49796
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-16 16:15 修改: 2026-06-29 21:16
|
| libxml2 |
CVE-2025-6021 |
高危 |
2.9.13-3.el9_1 |
2.9.13-10.el9_6 |
libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6021
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-12 13:15 修改: 2026-06-30 11:16
|
| libxml2 |
CVE-2025-7425 |
高危 |
2.9.13-3.el9_1 |
2.9.13-11.el9_6 |
libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-10 14:15 修改: 2026-06-29 21:16
|
| openssl |
CVE-2024-12797 |
高危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12797
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-02-11 16:15 修改: 2026-06-17 07:00
|
| openssl |
CVE-2025-11187 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29
|
| openssl |
CVE-2025-15467 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-30 03:16
|
| openssl |
CVE-2025-15468 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| openssl |
CVE-2025-15469 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| openssl |
CVE-2025-66199 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
|
| openssl |
CVE-2025-68160 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
|
| openssl |
CVE-2025-69418 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl |
CVE-2025-69419 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl |
CVE-2025-69420 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via malformed TimeStamp Response
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl |
CVE-2025-69421 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl |
CVE-2026-22795 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| openssl |
CVE-2026-22796 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| openssl |
CVE-2026-34180 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl |
CVE-2026-34181 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl |
CVE-2026-34182 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl |
CVE-2026-34183 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl |
CVE-2026-42764 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl |
CVE-2026-42766 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl |
CVE-2026-42767 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl |
CVE-2026-42768 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl |
CVE-2026-42769 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl |
CVE-2026-42770 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl |
CVE-2026-45445 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
|
| openssl |
CVE-2026-45446 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
|
| openssl |
CVE-2026-45447 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-07-14 12:17
|
| openssl |
CVE-2026-7383 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02
|
| openssl |
CVE-2026-9076 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04
|
| openssl-libs |
CVE-2024-12797 |
高危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: RFC7250 handshakes with unauthenticated servers don't abort as expected
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12797
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-02-11 16:15 修改: 2026-06-17 07:00
|
| openssl-libs |
CVE-2025-11187 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29
|
| openssl-libs |
CVE-2025-15467 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-30 03:16
|
| openssl-libs |
CVE-2025-15468 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| openssl-libs |
CVE-2025-15469 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37
|
| openssl-libs |
CVE-2025-66199 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56
|
| openssl-libs |
CVE-2025-68160 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
|
| openssl-libs |
CVE-2025-69418 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl-libs |
CVE-2025-69419 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl-libs |
CVE-2025-69420 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via malformed TimeStamp Response
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl-libs |
CVE-2025-69421 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
|
| openssl-libs |
CVE-2026-22795 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| openssl-libs |
CVE-2026-22796 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.1-7.el9_7 |
openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
|
| openssl-libs |
CVE-2026-34180 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl-libs |
CVE-2026-34181 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl-libs |
CVE-2026-34182 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl-libs |
CVE-2026-34183 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:38
|
| openssl-libs |
CVE-2026-42764 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: NULL pointer dereference in QUIC server initial packet handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl-libs |
CVE-2026-42766 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Possible NULL Dereference in Password-Based CMS Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl-libs |
CVE-2026-42767 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl-libs |
CVE-2026-42768 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl-libs |
CVE-2026-42769 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl-libs |
CVE-2026-42770 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: FFC-DH Peer Validation Uses Attacker-Supplied q
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:48
|
| openssl-libs |
CVE-2026-45445 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: AES-OCB IV Ignored on EVP_Cipher() Path
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
|
| openssl-libs |
CVE-2026-45446 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 10:52
|
| openssl-libs |
CVE-2026-45447 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-07-14 12:17
|
| openssl-libs |
CVE-2026-7383 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:02
|
| openssl-libs |
CVE-2026-9076 |
高危 |
1:3.0.7-6.el9_2 |
1:3.5.5-4.el9_8 |
openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-06-09 17:17 修改: 2026-06-17 11:04
|
| pam |
CVE-2024-10963 |
高危 |
1.5.1-14.el9 |
1.5.1-22.el9_5 |
pam: Improper Hostname Interpretation in pam_access Leads to Access Control Bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10963
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-11-07 16:15 修改: 2026-06-17 06:56
|
| pam |
CVE-2025-6020 |
高危 |
1.5.1-14.el9 |
1.5.1-26.el9_6 |
linux-pam: Linux-pam directory Traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-17 13:15 修改: 2026-06-30 11:16
|
| pam |
CVE-2025-8941 |
高危 |
1.5.1-14.el9 |
1.5.1-26.el9_6 |
linux-pam: Incomplete fix for CVE-2025-6020
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8941
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-08-13 15:15 修改: 2026-06-17 10:07
|
| python3 |
CVE-2023-24329 |
高危 |
3.9.16-1.el9 |
3.9.16-1.el9_2.1 |
python: urllib.parse url blocklisting bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39
|
| python3 |
CVE-2023-6597 |
高危 |
3.9.16-1.el9 |
3.9.18-3.el9_4.1 |
python: Path traversal on tempfile.TemporaryDirectory
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51
|
| python3 |
CVE-2024-0450 |
高危 |
3.9.16-1.el9 |
3.9.18-3.el9_4.1 |
python: The zipfile module is vulnerable to zip-bombs leading to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53
|
| python3 |
CVE-2024-12718 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: python: Bypass extraction filter to modify file metadata outside extraction directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12718
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 07:00
|
| python3 |
CVE-2025-4138 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4138
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:32
|
| python3 |
CVE-2025-4330 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: python: Extraction filter bypass for linking outside extraction directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4330
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33
|
| python3 |
CVE-2025-4435 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: Tarfile extracts filtered members when errorlevel=0
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4435
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33
|
| python3 |
CVE-2025-4517 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
python: cpython: Arbitrary writes via tarfile realpath overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4517
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33
|
| python3 |
CVE-2026-4519 |
高危 |
3.9.16-1.el9 |
3.9.25-7.el9_8 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 15:16 修改: 2026-06-30 03:20
|
| python3 |
CVE-2026-4786 |
高危 |
3.9.16-1.el9 |
3.9.25-7.el9_8 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-13 22:16 修改: 2026-07-06 13:17
|
| python3 |
CVE-2026-6100 |
高危 |
3.9.16-1.el9 |
3.9.25-7.el9_8 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-13 18:16 修改: 2026-06-30 03:21
|
| python3-libs |
CVE-2023-24329 |
高危 |
3.9.16-1.el9 |
3.9.16-1.el9_2.1 |
python: urllib.parse url blocklisting bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-02-17 15:15 修改: 2026-06-17 05:39
|
| python3-libs |
CVE-2023-6597 |
高危 |
3.9.16-1.el9 |
3.9.18-3.el9_4.1 |
python: Path traversal on tempfile.TemporaryDirectory
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:51
|
| python3-libs |
CVE-2024-0450 |
高危 |
3.9.16-1.el9 |
3.9.18-3.el9_4.1 |
python: The zipfile module is vulnerable to zip-bombs leading to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-03-19 16:15 修改: 2026-06-17 06:53
|
| python3-libs |
CVE-2024-12718 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: python: Bypass extraction filter to modify file metadata outside extraction directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12718
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 07:00
|
| python3-libs |
CVE-2025-4138 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: python: Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4138
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:32
|
| python3-libs |
CVE-2025-4330 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: python: Extraction filter bypass for linking outside extraction directory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4330
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33
|
| python3-libs |
CVE-2025-4435 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
cpython: Tarfile extracts filtered members when errorlevel=0
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4435
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33
|
| python3-libs |
CVE-2025-4517 |
高危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.1 |
python: cpython: Arbitrary writes via tarfile realpath overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4517
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-03 13:15 修改: 2026-06-17 09:33
|
| python3-libs |
CVE-2026-4519 |
高危 |
3.9.16-1.el9 |
3.9.25-7.el9_8 |
python: Python: Command-line option injection in webbrowser.open() via crafted URLs
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 15:16 修改: 2026-06-30 03:20
|
| python3-libs |
CVE-2026-4786 |
高危 |
3.9.16-1.el9 |
3.9.25-7.el9_8 |
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-13 22:16 修改: 2026-07-06 13:17
|
| python3-libs |
CVE-2026-6100 |
高危 |
3.9.16-1.el9 |
3.9.25-7.el9_8 |
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-13 18:16 修改: 2026-06-30 03:21
|
| sqlite-libs |
CVE-2025-6965 |
高危 |
3.34.1-6.el9_1 |
3.34.1-9.el9_7 |
sqlite: Integer Truncation in SQLite
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-15 14:15 修改: 2026-06-26 16:36
|
| vim-minimal |
CVE-2026-28417 |
高危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-23.el9_7.2 |
vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28417
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28
|
| vim-minimal |
CVE-2026-28421 |
高危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-23.el9_7.2 |
vim: Vim: Denial of service and information disclosure via crafted swap file
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28421
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-02-27 22:16 修改: 2026-06-17 10:28
|
| vim-minimal |
CVE-2026-33412 |
高危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-23.el9_7.2 |
vim: Vim: Arbitrary code execution via command injection in glob() function
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33412
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-24 20:16 修改: 2026-06-30 03:18
|
| vim-minimal |
CVE-2026-34982 |
高危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-26.el9_8.4 |
vim: arbitrary command execution via modeline sandbox bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34982
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-06 16:16 修改: 2026-07-07 12:16
|
| glib2 |
CVE-2025-14512 |
中危 |
2.68.4-6.el9 |
2.68.4-19.el9_8.1 |
glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-11 07:16 修改: 2026-07-13 17:16
|
| glib2 |
CVE-2025-4373 |
中危 |
2.68.4-6.el9 |
2.68.4-16.el9_6.2 |
glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4373
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-05-06 15:16 修改: 2026-06-30 11:16
|
| glibc-minimal-langpack |
CVE-2025-0395 |
中危 |
2.34-60.el9 |
2.34-125.el9_5.8 |
glibc: buffer overflow in the GNU C Library's assert()
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
|
| glibc-minimal-langpack |
CVE-2025-15281 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| glibc-minimal-langpack |
CVE-2025-4802 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.19 |
glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
|
| glibc-minimal-langpack |
CVE-2025-5702 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.20 |
glibc: Vector register overwrite bug in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
|
| glibc-minimal-langpack |
CVE-2025-8058 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.23 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| glibc-minimal-langpack |
CVE-2026-0861 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| glibc-minimal-langpack |
CVE-2026-0915 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| glibc-minimal-langpack |
CVE-2026-4046 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55
|
| glibc-minimal-langpack |
CVE-2026-4437 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
|
| glibc-minimal-langpack |
CVE-2026-4438 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
|
| glibc-minimal-langpack |
CVE-2026-5450 |
中危 |
2.34-60.el9 |
2.34-272.el9_8 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
|
| bzip2-libs |
CVE-2019-12900 |
中危 |
1.0.8-8.el9 |
1.0.8-10.el9_5 |
bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).
漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2019-06-19 23:15 修改: 2026-06-17 02:15
|
| coreutils-single |
CVE-2025-5278 |
中危 |
8.32-34.el9 |
8.32-41.el9_8 |
coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-05-27 21:15 修改: 2026-07-01 11:16
|
| curl-minimal |
CVE-2025-9086 |
中危 |
7.76.1-23.el9_2.1 |
7.76.1-35.el9_7.3 |
curl: libcurl: Curl out of bounds read for cookie path
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-12 06:15 修改: 2026-06-17 10:08
|
| binutils |
CVE-2025-11083 |
中危 |
2.35.2-37.el9 |
2.35.2-67.el9_7.1 |
binutils: GNU Binutils Linker heap-based overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29
|
| binutils-gold |
CVE-2025-11083 |
中危 |
2.35.2-37.el9 |
2.35.2-67.el9_7.1 |
binutils: GNU Binutils Linker heap-based overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-27 23:15 修改: 2026-06-17 08:29
|
| glibc |
CVE-2025-0395 |
中危 |
2.34-60.el9 |
2.34-125.el9_5.8 |
glibc: buffer overflow in the GNU C Library's assert()
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
|
| glibc |
CVE-2025-15281 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| glibc |
CVE-2025-4802 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.19 |
glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
|
| glibc |
CVE-2025-5702 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.20 |
glibc: Vector register overwrite bug in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
|
| glibc |
CVE-2025-8058 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.23 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| openssl |
CVE-2024-6119 |
中危 |
1:3.0.7-6.el9_2 |
1:3.0.7-28.el9_4 |
openssl: Possible denial of service in X.509 name checks
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-09-03 16:15 修改: 2026-06-17 08:17
|
| openssl |
CVE-2025-9230 |
中危 |
1:3.0.7-6.el9_2 |
1:3.5.1-4.el9_7 |
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-30 14:15 修改: 2026-06-17 10:08
|
| openssl |
CVE-2026-28390 |
中危 |
1:3.0.7-6.el9_2 |
1:3.5.5-3.el9_8 |
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
|
| openssl |
CVE-2026-31790 |
中危 |
1:3.0.7-6.el9_2 |
1:3.5.5-2.el9_8 |
openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34
|
| glibc |
CVE-2026-0861 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| glibc |
CVE-2026-0915 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| glibc |
CVE-2026-4046 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55
|
| glibc |
CVE-2026-4437 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
|
| gnutls |
CVE-2024-12243 |
中危 |
3.7.6-20.el9_2 |
3.8.3-6.el9 |
gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-02-10 16:15 修改: 2026-06-17 06:59
|
| gnutls |
CVE-2024-28834 |
中危 |
3.7.6-20.el9_2 |
3.8.3-4.el9_4 |
gnutls: vulnerable to Minerva side-channel information leak
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-03-21 14:15 修改: 2026-06-17 07:21
|
| gnutls |
CVE-2024-28835 |
中危 |
3.7.6-20.el9_2 |
3.8.3-4.el9_4 |
gnutls: potential crash during chain building/verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-03-21 06:15 修改: 2026-07-03 03:16
|
| gnutls |
CVE-2025-14831 |
中危 |
3.7.6-20.el9_2 |
3.8.3-10.el9_7 |
gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-02-09 15:16 修改: 2026-06-30 00:16
|
| gnutls |
CVE-2025-32988 |
中危 |
3.7.6-20.el9_2 |
3.8.3-6.el9_6.2 |
gnutls: Vulnerability in GnuTLS otherName SAN export
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32988
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-10 08:15 修改: 2026-06-30 01:16
|
| gnutls |
CVE-2025-32989 |
中危 |
3.7.6-20.el9_2 |
3.8.3-6.el9_6.2 |
gnutls: Vulnerability in GnuTLS SCT extension parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32989
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-10 08:15 修改: 2026-06-30 01:16
|
| gnutls |
CVE-2025-32990 |
中危 |
3.7.6-20.el9_2 |
3.8.3-6.el9_6.2 |
gnutls: Vulnerability in GnuTLS certtool template parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32990
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-10 10:15 修改: 2026-06-30 01:16
|
| gnutls |
CVE-2025-6395 |
中危 |
3.7.6-20.el9_2 |
3.8.3-6.el9_6.2 |
gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite()
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6395
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-10 16:15 修改: 2026-06-30 02:16
|
| gnutls |
CVE-2025-9820 |
中危 |
3.7.6-20.el9_2 |
3.8.3-10.el9_7 |
gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-26 20:16 修改: 2026-06-30 09:16
|
| glibc |
CVE-2026-4438 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
|
| glibc |
CVE-2026-5450 |
中危 |
2.34-60.el9 |
2.34-272.el9_8 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
|
| expat |
CVE-2024-45490 |
中危 |
2.5.0-1.el9 |
2.5.0-2.el9_4.1 |
libexpat: Negative Length Parsing Vulnerability in libexpat
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
|
| krb5-libs |
CVE-2023-36054 |
中危 |
1.20.1-8.el9 |
1.21.1-10.el9_8 |
krb5: Denial of service through freeing uninitialized pointer
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
|
| krb5-libs |
CVE-2023-39975 |
中危 |
1.20.1-8.el9 |
1.21.1-10.el9_8 |
krb5: double-free in KDC TGS processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39975
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-08-16 15:15 修改: 2026-06-17 06:13
|
| krb5-libs |
CVE-2025-24528 |
中危 |
1.20.1-8.el9 |
1.21.1-6.el9 |
krb5: overflow when calculating ulog block size
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
|
| krb5-libs |
CVE-2025-3576 |
中危 |
1.20.1-8.el9 |
1.21.1-8.el9_6 |
krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-04-15 06:15 修改: 2026-06-30 01:16
|
| expat |
CVE-2024-45491 |
中危 |
2.5.0-1.el9 |
2.5.0-2.el9_4.1 |
libexpat: Integer Overflow or Wraparound
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
|
| less |
CVE-2022-46663 |
中危 |
590-1.el9_0 |
590-2.el9_2 |
less: crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-46663
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-02-07 21:15 修改: 2026-06-17 05:12
|
| less |
CVE-2022-48624 |
中危 |
590-1.el9_0 |
590-3.el9_3 |
less: missing quoting of shell metacharacters in LESSCLOSE handling
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48624
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-02-19 01:15 修改: 2026-06-17 05:15
|
| expat |
CVE-2024-45492 |
中危 |
2.5.0-1.el9 |
2.5.0-2.el9_4.1 |
libexpat: integer overflow
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-08-30 03:15 修改: 2026-06-17 07:54
|
| expat |
CVE-2024-8176 |
中危 |
2.5.0-1.el9 |
2.5.0-5.el9_6 |
libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8176
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-03-14 09:15 修改: 2026-06-30 00:16
|
| glib2 |
CVE-2024-34397 |
中危 |
2.68.4-6.el9 |
2.68.4-14.el9_4.1 |
glib2: Signal subscription vulnerabilities
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34397
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-07 18:15 修改: 2026-06-17 07:33
|
| glibc-common |
CVE-2025-0395 |
中危 |
2.34-60.el9 |
2.34-125.el9_5.8 |
glibc: buffer overflow in the GNU C Library's assert()
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
|
| libarchive |
CVE-2025-25724 |
中危 |
3.5.3-4.el9 |
3.5.3-5.el9_6 |
libarchive: Buffer Overflow vulnerability in libarchive
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-25724
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-03-02 02:15 修改: 2026-06-17 09:01
|
| openssl-libs |
CVE-2024-6119 |
中危 |
1:3.0.7-6.el9_2 |
1:3.0.7-28.el9_4 |
openssl: Possible denial of service in X.509 name checks
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-09-03 16:15 修改: 2026-06-17 08:17
|
| openssl-libs |
CVE-2025-9230 |
中危 |
1:3.0.7-6.el9_2 |
1:3.5.1-4.el9_7 |
openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-30 14:15 修改: 2026-06-17 10:08
|
| openssl-libs |
CVE-2026-28390 |
中危 |
1:3.0.7-6.el9_2 |
1:3.5.5-3.el9_8 |
openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:28
|
| openssl-libs |
CVE-2026-31790 |
中危 |
1:3.0.7-6.el9_2 |
1:3.5.5-2.el9_8 |
openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-07 22:16 修改: 2026-06-17 10:34
|
| p11-kit |
CVE-2026-2100 |
中危 |
0.24.1-2.el9 |
0.26.2-1.el9 |
p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-26 21:17 修改: 2026-07-13 17:17
|
| p11-kit-trust |
CVE-2026-2100 |
中危 |
0.24.1-2.el9 |
0.26.2-1.el9 |
p11-kit: NULL dereference via C_DeriveKey with specific NULL parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2100
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-26 21:17 修改: 2026-07-13 17:17
|
| libblkid |
CVE-2025-14104 |
中危 |
2.37.4-11.el9_2 |
2.37.4-21.el9 |
util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
|
| glibc-common |
CVE-2025-15281 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
|
| libcurl-minimal |
CVE-2025-9086 |
中危 |
7.76.1-23.el9_2.1 |
7.76.1-35.el9_7.3 |
curl: libcurl: Curl out of bounds read for cookie path
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-12 06:15 修改: 2026-06-17 10:08
|
| libeconf |
CVE-2023-22652 |
中危 |
0.4.1-2.el9 |
0.4.1-3.el9_2 |
libeconf: stack-based buffer overflow in read_file() in lib/getfilecontents.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22652
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-06-01 12:15 修改: 2026-06-17 05:35
|
| libfdisk |
CVE-2025-14104 |
中危 |
2.37.4-11.el9_2 |
2.37.4-21.el9 |
util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
|
| libgcc |
CVE-2020-11023 |
中危 |
11.3.1-4.3.el9 |
11.5.0-5.el9_5 |
jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2020-04-29 21:15 修改: 2026-06-17 02:48
|
| libgcrypt |
CVE-2024-2236 |
中危 |
1.10.0-10.el9_2 |
1.10.0-11.el9 |
libgcrypt: vulnerable to Marvin Attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
|
| libgomp |
CVE-2020-11023 |
中危 |
11.3.1-4.3.el9 |
11.5.0-5.el9_5 |
jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2020-04-29 21:15 修改: 2026-06-17 02:48
|
| libmount |
CVE-2025-14104 |
中危 |
2.37.4-11.el9_2 |
2.37.4-21.el9 |
util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
|
| glibc-common |
CVE-2025-4802 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.19 |
glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
|
| libnghttp2 |
CVE-2024-28182 |
中危 |
1.43.0-5.el9 |
1.43.0-5.el9_4.3 |
nghttp2: CONTINUATION frames DoS
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-04-04 15:15 修改: 2026-06-17 07:21
|
| libsmartcols |
CVE-2025-14104 |
中危 |
2.37.4-11.el9_2 |
2.37.4-21.el9 |
util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
|
| libstdc++ |
CVE-2020-11023 |
中危 |
11.3.1-4.3.el9 |
11.5.0-5.el9_5 |
jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods
漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2020-04-29 21:15 修改: 2026-06-17 02:48
|
| libtasn1 |
CVE-2024-12133 |
中危 |
4.16.0-8.el9_1 |
4.16.0-9.el9 |
libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-02-10 16:15 修改: 2026-06-30 03:16
|
| python3 |
CVE-2024-11168 |
中危 |
3.9.16-1.el9 |
3.9.21-1.el9_5 |
python: Improper validation of IPv6 and IPvFuture addresses
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57
|
| python3 |
CVE-2024-5642 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-06-27 21:15 修改: 2026-06-17 08:16
|
| python3 |
CVE-2024-6232 |
中危 |
3.9.16-1.el9 |
3.9.18-3.el9_4.6 |
python: cpython: tarfile: ReDos via excessive backtracking while parsing header values
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17
|
| python3 |
CVE-2024-9287 |
中危 |
3.9.16-1.el9 |
3.9.21-1.el9_5 |
python: Virtual environment (venv) activation scripts don't quote paths
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24
|
| python3 |
CVE-2025-0938 |
中危 |
3.9.16-1.el9 |
3.9.21-2.el9 |
python: cpython: URL parser allowed square brackets in domain names
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27
|
| python3 |
CVE-2025-12084 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7 |
cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
|
| python3 |
CVE-2025-15366 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: IMAP command injection in user-controlled commands
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
|
| python3 |
CVE-2025-15367 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: POP3 command injection in user-controlled commands
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
|
| python3 |
CVE-2025-6069 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
cpython: Python HTMLParser quadratic complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01
|
| python3 |
CVE-2025-6075 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
python: Quadratic complexity in os.path.expandvars() with user-controlled template
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01
|
| python3 |
CVE-2025-8194 |
中危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.2 |
cpython: Cpython infinite loop when parsing a tarfile
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06
|
| python3 |
CVE-2025-8291 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06
|
| python3 |
CVE-2026-0865 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: wsgiref.headers.Headers allows header newline injection in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python3 |
CVE-2026-1299 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: email header injection due to unquoted newlines
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
|
| libuuid |
CVE-2025-14104 |
中危 |
2.37.4-11.el9_2 |
2.37.4-21.el9 |
util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
|
| glibc-common |
CVE-2025-5702 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.20 |
glibc: Vector register overwrite bug in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5702
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-05 19:15 修改: 2026-06-17 09:48
|
| glibc-common |
CVE-2025-8058 |
中危 |
2.34-60.el9 |
2.34-168.el9_6.23 |
glibc: Double free in glibc
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
|
| glibc-common |
CVE-2026-0861 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: Integer overflow in memalign leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
|
| glibc-common |
CVE-2026-0915 |
中危 |
2.34-60.el9 |
2.34-231.el9_7.10 |
glibc: glibc: Information disclosure via zero-valued network query
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
|
| glibc-common |
CVE-2026-4046 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Denial of Service via iconv() function with specific character sets
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-30 18:16 修改: 2026-06-17 10:55
|
| glibc-common |
CVE-2026-4437 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Incorrect DNS response parsing via crafted DNS server response
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
|
| libxml2 |
CVE-2024-25062 |
中危 |
2.9.13-3.el9_1 |
2.9.13-6.el9_4 |
libxml2: use-after-free in XMLReader
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-02-04 16:15 修改: 2026-06-17 07:15
|
| libxml2 |
CVE-2025-32414 |
中危 |
2.9.13-3.el9_1 |
2.9.13-12.el9_6 |
libxml2: Out-of-Bounds Read in libxml2
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32414
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-04-08 03:15 修改: 2026-06-17 09:11
|
| libxml2 |
CVE-2025-32415 |
中危 |
2.9.13-3.el9_1 |
2.9.13-12.el9_6 |
libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32415
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-04-17 17:15 修改: 2026-06-17 09:11
|
| libxml2 |
CVE-2025-9714 |
中危 |
2.9.13-3.el9_1 |
2.9.13-14.el9_7 |
libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9714
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-09-10 19:15 修改: 2026-06-17 10:09
|
| python3-libs |
CVE-2024-11168 |
中危 |
3.9.16-1.el9 |
3.9.21-1.el9_5 |
python: Improper validation of IPv6 and IPvFuture addresses
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-11-12 22:15 修改: 2026-06-17 06:57
|
| python3-libs |
CVE-2024-5642 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-06-27 21:15 修改: 2026-06-17 08:16
|
| python3-libs |
CVE-2024-6232 |
中危 |
3.9.16-1.el9 |
3.9.18-3.el9_4.6 |
python: cpython: tarfile: ReDos via excessive backtracking while parsing header values
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-09-03 13:15 修改: 2026-06-17 08:17
|
| python3-libs |
CVE-2024-9287 |
中危 |
3.9.16-1.el9 |
3.9.21-1.el9_5 |
python: Virtual environment (venv) activation scripts don't quote paths
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-10-22 17:15 修改: 2026-06-17 08:24
|
| python3-libs |
CVE-2025-0938 |
中危 |
3.9.16-1.el9 |
3.9.21-2.el9 |
python: cpython: URL parser allowed square brackets in domain names
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-01-31 18:15 修改: 2026-06-17 08:27
|
| python3-libs |
CVE-2025-12084 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7 |
cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-03 19:15 修改: 2026-06-17 08:31
|
| python3-libs |
CVE-2025-15366 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: IMAP command injection in user-controlled commands
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 22:15 修改: 2026-07-09 18:16
|
| python3-libs |
CVE-2025-15367 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: POP3 command injection in user-controlled commands
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 22:15 修改: 2026-06-17 08:37
|
| python3-libs |
CVE-2025-6069 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
cpython: Python HTMLParser quadratic complexity
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-06-17 14:15 修改: 2026-06-17 10:01
|
| python3-libs |
CVE-2025-6075 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
python: Quadratic complexity in os.path.expandvars() with user-controlled template
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-10-31 17:15 修改: 2026-06-17 10:01
|
| python3-libs |
CVE-2025-8194 |
中危 |
3.9.16-1.el9 |
3.9.21-2.el9_6.2 |
cpython: Cpython infinite loop when parsing a tarfile
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8194
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-28 19:15 修改: 2026-06-17 10:06
|
| python3-libs |
CVE-2025-8291 |
中危 |
3.9.16-1.el9 |
3.9.25-2.el9_7 |
cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-10-07 18:16 修改: 2026-06-17 10:06
|
| python3-libs |
CVE-2026-0865 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: wsgiref.headers.Headers allows header newline injection in Python
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-20 22:15 修改: 2026-06-17 10:11
|
| python3-libs |
CVE-2026-1299 |
中危 |
3.9.16-1.el9 |
3.9.25-3.el9_7.1 |
cpython: email header injection due to unquoted newlines
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1299
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-23 17:16 修改: 2026-06-17 10:15
|
| python3-setuptools-wheel |
CVE-2025-47273 |
中危 |
53.0.0-12.el9 |
53.0.0-13.el9_6.1 |
setuptools: Path Traversal Vulnerability in setuptools PackageIndex
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47273
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-05-17 16:15 修改: 2026-06-17 09:27
|
| glibc-common |
CVE-2026-4438 |
中危 |
2.34-60.el9 |
2.34-270.el9_8 |
glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-20 20:16 修改: 2026-06-17 10:56
|
| sqlite-libs |
CVE-2023-7104 |
中危 |
3.34.1-6.el9_1 |
3.34.1-7.el9_3 |
sqlite: heap-buffer-overflow at sessionfuzz
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-12-29 10:15 修改: 2026-06-17 06:52
|
| systemd-libs |
CVE-2023-7008 |
中危 |
252-13.el9_2 |
252-32.el9_4 |
systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51
|
| systemd-libs |
CVE-2025-4598 |
中危 |
252-13.el9_2 |
252-55.el9_7.7.rocky.0.1 |
systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-05-30 14:15 修改: 2026-06-30 11:16
|
| systemd-libs |
CVE-2026-29111 |
中危 |
252-13.el9_2 |
252-67.el9_8.2.rocky.0.1 |
systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
|
| tar |
CVE-2025-45582 |
中危 |
2:1.34-6.el9_1 |
2:1.34-9.el9_7 |
tar: Tar path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-11 17:15 修改: 2026-06-17 09:25
|
| util-linux |
CVE-2025-14104 |
中危 |
2.37.4-11.el9_2 |
2.37.4-21.el9 |
util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
|
| util-linux-core |
CVE-2025-14104 |
中危 |
2.37.4-11.el9_2 |
2.37.4-21.el9 |
util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-05 17:16 修改: 2026-06-30 00:16
|
| glibc-common |
CVE-2026-5450 |
中危 |
2.34-60.el9 |
2.34-272.el9_8 |
glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-20 21:16 修改: 2026-06-17 10:59
|
| glib2 |
CVE-2024-52533 |
中危 |
2.68.4-6.el9 |
2.68.4-16.el9_6.2 |
glib: buffer overflow in set_connect_msg()
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52533
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-11-11 23:15 修改: 2026-06-17 08:07
|
| glib2 |
CVE-2025-13601 |
中危 |
2.68.4-6.el9 |
2.68.4-18.el9_7.1 |
glib: Integer overflow in in g_escape_uri_string()
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-11-26 15:15 修改: 2026-06-30 00:16
|
| glib2 |
CVE-2025-14087 |
中危 |
2.68.4-6.el9 |
2.68.4-19.el9_8.1 |
glib: GLib: Buffer underflow in GVariant parser leads to heap corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-12-10 09:15 修改: 2026-07-13 22:16
|
| vim-minimal |
CVE-2025-53905 |
中危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-23.el9_7 |
vim: Vim path traversial
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53905
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39
|
| vim-minimal |
CVE-2025-53906 |
中危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-23.el9_7 |
vim: Vim path traversal
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53906
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2025-07-15 21:15 修改: 2026-06-17 09:39
|
| vim-minimal |
CVE-2026-25749 |
中危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-23.el9_7.1 |
vim: Vim: Arbitrary code execution via 'helpfile' option processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25749
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-02-06 23:15 修改: 2026-06-17 10:25
|
| vim-minimal |
CVE-2026-35177 |
中危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-26.el9_8.5 |
vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-06 18:16 修改: 2026-06-17 10:40
|
| vim-minimal |
CVE-2026-41411 |
中危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-26.el9_8.6 |
vim: Vim: Command injection allows arbitrary code execution via malicious tag files
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46
|
| libtasn1 |
CVE-2025-13151 |
低危 |
4.16.0-8.el9_1 |
4.16.0-10.el9_8 |
libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
|
| file-libs |
CVE-2022-48554 |
低危 |
5.39-12.el9 |
5.39-16.el9 |
file: stack-based buffer over-read in file_copystr in funcs.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48554
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-08-22 19:16 修改: 2026-06-17 05:15
|
| openssl |
CVE-2024-2511 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: Unbounded memory growth with session handling in TLSv1.3
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
|
| openssl |
CVE-2024-4603 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: Excessive time spent checking DSA keys and parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-16 16:15 修改: 2026-06-17 08:02
|
| openssl |
CVE-2024-4741 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: Use After Free with SSL_free_buffers
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
|
| openssl |
CVE-2024-5535 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: SSL_select_next_proto buffer overread
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
|
| gmp |
CVE-2021-43618 |
低危 |
1:6.2.0-10.el9 |
1:6.2.0-13.el9 |
gmp: Integer overflow and resultant buffer overflow via crafted input
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2021-11-15 04:15 修改: 2026-06-17 04:11
|
| libxml2 |
CVE-2024-34459 |
低危 |
2.9.13-3.el9_1 |
2.9.13-14.el9_8.1 |
libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33
|
| openssl-libs |
CVE-2024-2511 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: Unbounded memory growth with session handling in TLSv1.3
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
|
| openssl-libs |
CVE-2024-4603 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: Excessive time spent checking DSA keys and parameters
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-05-16 16:15 修改: 2026-06-17 08:02
|
| openssl-libs |
CVE-2024-4741 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: Use After Free with SSL_free_buffers
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
|
| openssl-libs |
CVE-2024-5535 |
低危 |
1:3.0.7-6.el9_2 |
1:3.2.2-6.el9_5.1 |
openssl: SSL_select_next_proto buffer overread
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
|
| shadow-utils |
CVE-2024-56433 |
低危 |
2:4.9-6.el9 |
2:4.9-15.el9 |
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| ncurses-base |
CVE-2022-29458 |
低危 |
6.2-8.20210508.el9 |
6.2-10.20210508.el9_6.2 |
ncurses: segfaulting OOB read
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
|
| ncurses-libs |
CVE-2022-29458 |
低危 |
6.2-8.20210508.el9 |
6.2-10.20210508.el9_6.2 |
ncurses: segfaulting OOB read
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29458
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2022-04-18 21:15 修改: 2026-06-17 04:40
|
| vim-minimal |
CVE-2021-3903 |
低危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-21.el9 |
vim: heap-based buffer overflow vulnerability
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3903
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2021-10-27 21:15 修改: 2026-06-17 04:05
|
| vim-minimal |
CVE-2023-4752 |
低危 |
2:8.2.2637-20.el9_1 |
2:8.2.2637-22.el9_6 |
vim: use-after-free in function ins_compl_get_exp in vim/vim
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4752
镜像层: sha256:bb25ee44616317f282ff1dd8b788797e3fd5f754b78425d564527fec4ca4f051
发布日期: 2023-09-04 14:15 修改: 2026-06-17 06:38
|