docker.io/rockylinux/rockylinux:9.8.20260525.0 linux/amd64

docker.io/rockylinux/rockylinux:9.8.20260525.0 - Trivy安全扫描结果 扫描时间: 2026-09-09 10:54
全部漏洞信息
低危漏洞:3 中危漏洞:49 高危漏洞:70 严重漏洞:0

系统OS: rocky 9.8 扫描引擎: Trivy 扫描时间: 2026-09-09 10:54

docker.io/rockylinux/rockylinux:9.8.20260525.0 (rocky 9.8) (rocky)
低危漏洞:3 中危漏洞:49 高危漏洞:70 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
curl-minimal CVE-2026-1965 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
curl-minimal CVE-2026-3783 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
curl-minimal CVE-2026-8286 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
curl-minimal CVE-2026-9547 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
expat CVE-2026-45186 高危 2.5.0-6.el9 2.5.0-6.el9_8.1 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-10 07:16 修改: 2026-08-25 13:19
glib2 CVE-2026-58016 高危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.2 glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58016

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 13:19 修改: 2026-08-25 10:18
gnutls CVE-2026-33845 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-30 18:16 修改: 2026-09-04 13:19
gnutls CVE-2026-33846 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-04 10:15 修改: 2026-09-04 13:19
gnutls CVE-2026-3832 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-30 18:16 修改: 2026-09-01 13:19
gnutls CVE-2026-3833 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-30 18:16 修改: 2026-09-03 15:17
gnutls CVE-2026-42009 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-18 13:16 修改: 2026-09-04 13:19
gnutls CVE-2026-42010 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-07 12:16 修改: 2026-09-04 13:19
gnutls CVE-2026-42011 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-07 15:16 修改: 2026-09-03 15:17
gnutls CVE-2026-42012 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19
gnutls CVE-2026-42013 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17
gnutls CVE-2026-42014 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-16 02:16 修改: 2026-09-01 13:19
gnutls CVE-2026-42015 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-26 22:16 修改: 2026-09-01 13:19
gnutls CVE-2026-5260 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-26 22:16 修改: 2026-09-03 15:17
gnutls CVE-2026-5419 高危 3.8.10-3.el9 3.8.10-4.el9_8 gnutls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-01 21:16 修改: 2026-09-01 13:19
libacl CVE-2026-54369 高危 2.3.1-4.el9 2.4.0-1.el9_8 acl: Symlink traversal privilege escalation via libacl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 14:16 修改: 2026-09-07 13:20
libacl CVE-2026-54370 高危 2.3.1-4.el9 2.4.0-1.el9_8 acl: TOCTOU Symlink Traversal via getfacl/setfacl

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
libcurl-minimal CVE-2026-1965 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-11 11:15 修改: 2026-06-17 10:16
libcurl-minimal CVE-2026-3783 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-11 11:16 修改: 2026-06-17 10:44
libcurl-minimal CVE-2026-8286 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Insecure connection establishment due to TLS configuration mismatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8286

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 19:42
libcurl-minimal CVE-2026-9547 高危 7.76.1-40.el9 7.76.1-40.el9_8.5 curl: curl: Man-in-the-middle attack via SSH host key bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9547

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-03 07:16 修改: 2026-07-07 14:52
openssl CVE-2026-34180 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-34181 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-34182 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-34183 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42764 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42766 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42767 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42768 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42769 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-42770 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-45445 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-45446 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-45447 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-09-07 13:20
openssl CVE-2026-7383 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl CVE-2026-9076 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34180 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34181 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34182 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-34183 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42764 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42766 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42767 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42768 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42769 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-42770 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45445 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45446 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-45447 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-09-07 13:20
openssl-libs CVE-2026-7383 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
openssl-libs CVE-2026-9076 高危 1:3.5.5-2.el9_8 1:3.5.5-4.el9_8 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
python3 CVE-2026-11940 高危 3.9.25-7.el9_8 3.9.25-7.el9_8.3 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
python3 CVE-2026-15308 高危 3.9.25-7.el9_8 3.9.25-7.el9_8.2 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
python3-libs CVE-2026-11940 高危 3.9.25-7.el9_8 3.9.25-7.el9_8.3 python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11940

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-23 17:16 修改: 2026-08-13 01:16
python3-libs CVE-2026-15308 高危 3.9.25-7.el9_8 3.9.25-7.el9_8.2 python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15308

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-09 17:16 修改: 2026-08-20 17:02
sqlite-libs CVE-2026-11822 高危 3.34.1-9.el9_7 3.34.1-11.el9_8 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
sqlite-libs CVE-2026-11824 高危 3.34.1-9.el9_7 3.34.1-11.el9_8 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10
vim-minimal CVE-2026-46483 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.10 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-15 15:16 修改: 2026-06-17 10:53
vim-minimal CVE-2026-47162 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.10 vim: Vim: Arbitrary Code Execution via crafted directory names

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47162

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-11 19:16 修改: 2026-09-04 13:19
vim-minimal CVE-2026-47167 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.10 vim: Vim: Arbitrary code execution via crafted step-definition patterns

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47167

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:54
vim-minimal CVE-2026-52858 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.10 vim: Vim: Arbitrary code execution via Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-52858

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-11 19:16 修改: 2026-06-17 10:57
vim-minimal CVE-2026-55693 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.13 vim: Vim: Out-of-bounds Write in Spell File Word Count

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55693

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-25 16:16 修改: 2026-06-26 14:17
vim-minimal CVE-2026-57455 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.13 vim: Vim: Denial of Service via stack out-of-bounds write in spell_soundfold_sofo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57455

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-25 16:16 修改: 2026-06-26 04:23
vim-minimal CVE-2026-57456 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.13 vim: Vim: Arbitrary code execution via malicious docstrings in Python omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57456

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-25 16:16 修改: 2026-06-26 05:16
vim-minimal CVE-2026-59856 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.13 vim: Vim: Arbitrary code execution via crafted PHP file in omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59856

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
vim-minimal CVE-2026-59858 高危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.13 vim: Vim: Arbitrary command execution via crafted tags file in C omni-completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59858

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-09 23:17 修改: 2026-07-14 05:16
glibc-minimal-langpack CVE-2026-4438 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-minimal-langpack CVE-2026-5435 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-5450 中危 2.34-266.el9_8 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-5928 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-6238 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
attr CVE-2026-54371 中危 2.5.1-3.el9 2.6.0-1.el9_8 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18
coreutils-single CVE-2025-5278 中危 8.32-40.el9 8.32-41.el9_8 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2025-05-27 21:15 修改: 2026-09-07 23:16
glib2 CVE-2026-15588 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 GDBusServer: glib2: GDBusServer pre-authentication DoS via unbounded SASL line buffering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15588

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-07-20 12:17 修改: 2026-09-01 13:18
glib2 CVE-2026-58010 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58010

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16
openssl CVE-2026-28390 中危 1:3.5.5-2.el9_8 1:3.5.5-3.el9_8 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
glib2 CVE-2026-58011 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid GDateTime

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58011

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16
glib2 CVE-2026-58012 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58012

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16
glib2 CVE-2026-58013 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58013

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16
glib2 CVE-2026-58014 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58014

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16
glib2 CVE-2026-58015 中危 2.68.4-19.el9_8.1 2.68.4-19.el9_8.9 glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58015

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 13:19 修改: 2026-09-01 03:16
glibc CVE-2026-4046 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc CVE-2026-4437 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2026-4438 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc CVE-2026-5435 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
gzip CVE-2026-41991 中危 1.12-1.el9 1.12-2.el9_8 gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
gzip CVE-2026-41992 中危 1.12-1.el9 1.12-2.el9_8 gzip: gzip: Information disclosure via global buffer overflow in LZH decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 12:16 修改: 2026-08-27 13:17
glibc CVE-2026-5450 中危 2.34-266.el9_8 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc CVE-2026-5928 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libarchive CVE-2026-14164 中危 3.5.3-9.el9_7 3.5.3-11.el9_8 libarchive: Double-Free Vulnerability in RAR5 Decompression Logic via dangling filtered_buf pointer in init_unpack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14164

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-30 07:16 修改: 2026-09-01 03:16
libattr CVE-2026-54371 中危 2.5.1-3.el9 2.6.0-1.el9_8 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 14:16 修改: 2026-09-02 13:18
openssl-libs CVE-2026-28390 中危 1:3.5.5-2.el9_8 1:3.5.5-3.el9_8 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
p11-kit CVE-2026-13757 中危 0.26.2-1.el9 0.26.4-1.el9_8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
p11-kit-trust CVE-2026-13757 中危 0.26.2-1.el9 0.26.4-1.el9_8 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
glibc CVE-2026-6238 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
glibc-common CVE-2026-4046 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-4437 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
glibc-common CVE-2026-4438 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
libgcrypt CVE-2026-41989 中危 1.10.0-11.el9 1.10.0-13.el9_8 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18
libnghttp2 CVE-2026-58055 中危 1.43.0-6.el9_7.1 1.43.0-6.el9_8.2 nghttp2: nghttp2: HTTP Request/Response Smuggling and Response-Queue Poisoning via ambiguous HTTP/1.1 Upgrade requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-58055

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-28 02:16 修改: 2026-06-30 17:41
systemd-libs CVE-2026-29111 中危 252-67.el9.rocky.0.1 252-67.el9_8.2.rocky.0.1 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
tar CVE-2026-18477 中危 2:1.34-11.el9 2:1.34-13.el9_8 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar CVE-2026-18508 中危 2:1.34-11.el9 2:1.34-13.el9_8 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
tar CVE-2026-5704 中危 2:1.34-11.el9 2:1.34-13.el9_8 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-06 16:16 修改: 2026-09-01 15:17
libsolv CVE-2026-48864 中危 0.7.24-4.el9 0.7.24-6.el9_8 libsolv: Heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48864

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-05-26 17:16 修改: 2026-09-03 15:17
libxml2 CVE-2026-11979 中危 2.9.13-14.el9_7 2.9.13-14.el9_8.4 libxml2: libxml2: Arbitrary code execution in xmlcatalog utility via buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11979

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-29 14:16 修改: 2026-06-30 20:22
libxml2 CVE-2026-6653 中危 2.9.13-14.el9_7 2.9.13-14.el9_8.4 libxml2: mingw-libxml2: libxml2: Denial of Service via crafted XML input due to use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6653

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-06-22 14:17 修改: 2026-07-14 16:00
glibc-common CVE-2026-5435 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
glibc-common CVE-2026-5450 中危 2.34-266.el9_8 2.34-272.el9_8 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-5928 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
glibc-common CVE-2026-6238 中危 2.34-266.el9_8 2.34-274.el9_8 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
glibc-minimal-langpack CVE-2026-4046 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
glibc-minimal-langpack CVE-2026-4437 中危 2.34-266.el9_8 2.34-270.el9_8 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-03-20 20:16 修改: 2026-07-14 13:18
vim-minimal CVE-2026-35177 中危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.5 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-06 18:16 修改: 2026-07-24 21:10
vim-minimal CVE-2026-41411 中危 2:8.2.2637-26.el9_8.4 2:8.2.2637-26.el9_8.6 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-04-24 17:16 修改: 2026-06-17 10:46
libxml2 CVE-2024-34459 低危 2.9.13-14.el9_7 2.9.13-14.el9_8.1 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2024-05-14 15:39 修改: 2026-06-17 07:33
libxml2 CVE-2025-6170 低危 2.9.13-14.el9_7 2.9.13-14.el9_8.2 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2025-06-16 16:15 修改: 2026-09-01 13:18
libtasn1 CVE-2025-13151 低危 4.16.0-9.el9 4.16.0-10.el9_8 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:f9961ae81d19825991159d47b3a28485d997cdb7a92f9845caeb507bcc3b67f8

发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×