docker.io/sakuravx/openguass:latest linux/amd64

docker.io/sakuravx/openguass:latest - Trivy安全扫描结果 扫描时间: 2026-06-08 16:16
全部漏洞信息
低危漏洞:740 中危漏洞:913 高危漏洞:154 严重漏洞:8

系统OS: centos 7.6.1810 扫描引擎: Trivy 扫描时间: 2026-06-08 16:16

docker.io/sakuravx/openguass:latest (centos 7.6.1810) (centos)
低危漏洞:736 中危漏洞:856 高危漏洞:95 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
nss CVE-2021-43527 严重 3.36.0-7.el7_5 3.67.0-4.el7_9 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:29

nss-sysinit CVE-2021-43527 严重 3.36.0-7.el7_5 3.67.0-4.el7_9 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:29

nss-tools CVE-2021-43527 严重 3.36.0-7.el7_5 3.67.0-4.el7_9 nss: Memory corruption in decodeECorDsaSignature with DSA signatures (and RSA-PSS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43527

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-08 22:15 修改: 2024-11-21 06:29

bind-license CVE-2020-8625 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.4 bind: Buffer overflow in the SPNEGO implementation affecting GSSAPI security policy negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8625

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-17 23:15 修改: 2024-11-21 05:39

bind-license CVE-2021-25215 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.5 bind: An assertion check can fail while answering queries for DNAME records that require the DNAME to be processed to resolve itself

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25215

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-04-29 01:15 修改: 2024-11-21 05:54

bind-license CVE-2022-38177 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.10 bind: memory leak in ECDSA DNSSEC verification code

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38177

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-21 11:15 修改: 2025-05-28 16:15

bind-license CVE-2022-38178 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.10 bind: memory leaks in EdDSA DNSSEC verification code

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38178

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-21 11:15 修改: 2025-05-28 16:15

bind-license CVE-2023-2828 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.14 bind: named's configured cache size limit can be significantly exceeded

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2828

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-21 17:15 修改: 2024-11-21 07:59

bind-license CVE-2023-3341 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.15 bind: stack exhaustion in control channel code may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3341

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-20 13:15 修改: 2025-12-02 21:15

bind-license CVE-2023-4408 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.16 bind9: Parsing large DNS messages may cause excessive CPU load

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4408

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-13 14:15 修改: 2025-03-14 17:15

bind-license CVE-2023-50387 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.16 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-14 16:15 修改: 2025-11-04 19:16

bind-license CVE-2023-50868 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.16 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-14 16:15 修改: 2025-12-23 20:20

bind-license CVE-2024-11187 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.18 bind: bind9: Many records in the additional section cause CPU exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11187

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-29 22:15 修改: 2026-04-15 00:35

bind-license CVE-2024-1737 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.17 bind: bind9: BIND's database will be slow if a very large number of RRs exist at the same nam

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1737

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-07-23 15:15 修改: 2026-04-15 00:35

bind-license CVE-2024-1975 高危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.17 bind9: bind: SIG(0) can be used to exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-1975

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-07-23 15:15 修改: 2026-04-15 00:35

bind-license CVE-2026-3039 高危 32:9.9.4-72.el7 bind: BIND 9 server memory exhaustion during GSS-API TKEY negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3039

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

bind-license CVE-2026-5946 高危 32:9.9.4-72.el7 bind: BIND: Denial of Service via specially crafted DNS messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5946

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

cyrus-sasl-lib CVE-2022-24407 高危 2.1.26-23.el7 2.1.26-24.el7_9 cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24407

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-24 15:15 修改: 2024-11-21 06:50

dbus CVE-2020-12049 高危 1:1.10.24-12.el7 1:1.10.24-14.el7_8 dbus: denial of service via file descriptor leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-06-08 17:15 修改: 2024-11-21 04:59

dbus-libs CVE-2020-12049 高危 1:1.10.24-12.el7 1:1.10.24-14.el7_8 dbus: denial of service via file descriptor leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12049

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-06-08 17:15 修改: 2024-11-21 04:59

expat CVE-2022-22822 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in addBinding in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22822

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22823 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in build_model in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22823

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22824 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in defineAttribute in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22824

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-25235 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Malformed 2- and 3-byte UTF-8 sequences can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25235

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-16 01:15 修改: 2025-05-05 17:18

expat CVE-2022-25236 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Namespace-separator characters in "xmlns[:prefix]" attribute values can lead to arbitrary code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25236

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-16 01:15 修改: 2025-05-05 17:18

expat CVE-2022-25315 高危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in storeRawNames()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25315

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-18 05:15 修改: 2025-05-05 17:18

expat CVE-2022-40674 高危 2.1.0-10.el7_3 2.1.0-15.el7_9 expat: a use-after-free in the doContent function in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40674

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-14 11:15 修改: 2025-05-30 20:15

expat CVE-2026-45186 高危 2.1.0-10.el7_3 libexpat: denial of service via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45186

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-10 07:16 修改: 2026-05-14 17:20

glib2 CVE-2021-27219 高危 2.56.1-2.el7 2.56.1-9.el7_9 glib: integer overflow in g_bytes_new function on 64-bit platforms due to an implicit cast from 64 bits to 32 bits

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27219

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:57

glibc CVE-2024-2961 高危 2.17-260.el7 2.17-326.el7_9.3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-04-17 18:15 修改: 2026-05-12 12:16

glibc CVE-2024-33599 高危 2.17-260.el7 2.17-326.el7_9.3 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc-common CVE-2024-2961 高危 2.17-260.el7 2.17-326.el7_9.3 glibc: Out of bounds write in iconv may lead to remote code execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-04-17 18:15 修改: 2026-05-12 12:16

glibc-common CVE-2024-33599 高危 2.17-260.el7 2.17-326.el7_9.3 glibc: stack-based buffer overflow in netgroup cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

gnupg2 CVE-2025-68973 高危 2.0.22-5.el7_5 2.0.22-5.el7_9.1 GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-28 17:16 修改: 2026-01-14 19:16

gzip CVE-2022-1271 高危 1.5-10.el7 1.5-11.el7_9 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15

krb5-libs CVE-2022-42898 高危 1.15.1-34.el7 1.15.1-55.el7_9 krb5: integer overflow vulnerabilities in PAC parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-12-25 06:15 修改: 2025-04-14 19:15

krb5-libs CVE-2024-3596 高危 1.15.1-34.el7 1.15.1-55.el7_9.3 freeradius: forgery attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3596

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-07-09 12:15 修改: 2026-05-12 12:16

libcap CVE-2026-4878 高危 2.22-9.el7 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-09 16:16 修改: 2026-06-04 00:17

libssh2 CVE-2026-7598 高危 1.8.0-4.el7 libssh2: integer overflow via large username or password arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7598

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-01 22:16 修改: 2026-05-07 01:47

libxml2 CVE-2024-56171 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Use-After-Free in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56171

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-18 22:15 修改: 2025-11-03 21:17

libxml2 CVE-2025-24928 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24928

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

libxml2 CVE-2025-49794 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Heap use after free (UAF) leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49794

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2 CVE-2025-49796 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Type confusion leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49796

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2 CVE-2025-7425 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.12 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-10 14:15 修改: 2026-05-12 13:17

libxml2-python CVE-2024-56171 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Use-After-Free in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56171

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-18 22:15 修改: 2025-11-03 21:17

libxml2-python CVE-2025-24928 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.9 libxml2: Stack-based buffer overflow in xmlSnprintfElements of libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24928

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

libxml2-python CVE-2025-49794 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Heap use after free (UAF) leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49794

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2-python CVE-2025-49796 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml: Type confusion leads to Denial of service (DoS)

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-49796

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2-python CVE-2025-7425 高危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.12 libxslt: libxml2: Heap Use-After-Free in libxslt caused by atype corruption in xmlAttrPtr

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7425

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-10 14:15 修改: 2026-05-12 13:17

bind-license CVE-2018-5743 高危 32:9.9.4-72.el7 32:9.9.4-74.el7_6.1 bind: Limiting simultaneous TCP clients is ineffective

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5743

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-09 16:15 修改: 2024-11-21 04:09

nss CVE-2019-11745 高危 3.36.0-7.el7_5 3.44.0-7.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss CVE-2023-0767 高危 3.36.0-7.el7_5 3.79.0-5.el7_9 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-02 17:15 修改: 2025-05-05 16:15

nss-softokn CVE-2019-11745 高危 3.36.0-5.el7_5 3.44.0-8.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-softokn-freebl CVE-2019-11745 高危 3.36.0-5.el7_5 3.44.0-8.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

bind-license CVE-2020-8616 高危 32:9.9.4-72.el7 32:9.11.4-16.P2.el7_8.6 bind: BIND does not sufficiently limit the number of fetches performed when processing referrals

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8616

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-05-19 14:15 修改: 2024-11-21 05:39

nss-sysinit CVE-2019-11745 高危 3.36.0-7.el7_5 3.44.0-7.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-sysinit CVE-2023-0767 高危 3.36.0-7.el7_5 3.79.0-5.el7_9 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-02 17:15 修改: 2025-05-05 16:15

bind-license CVE-2020-8617 高危 32:9.9.4-72.el7 32:9.11.4-16.P2.el7_8.6 bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8617

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-05-19 14:15 修改: 2024-11-21 05:39

nss-tools CVE-2019-11745 高危 3.36.0-7.el7_5 3.44.0-7.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-tools CVE-2023-0767 高危 3.36.0-7.el7_5 3.79.0-5.el7_9 nss: Arbitrary memory write via PKCS 12

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0767

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-02 17:15 修改: 2025-05-05 16:15

nss-util CVE-2019-11745 高危 3.36.0-1.el7_5 3.44.0-4.el7_7 nss: Out-of-bounds write when passing an output buffer smaller than the block size to NSC_EncryptUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

openssl-libs CVE-2020-1971 高危 1:1.0.2k-16.el7 1:1.0.2k-21.el7_9 openssl: EDIPARTYNAME NULL pointer de-reference

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1971

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-08 16:15 修改: 2026-05-29 16:16

openssl-libs CVE-2022-0778 高危 1:1.0.2k-16.el7 1:1.0.2k-25.el7_9 openssl: Infinite loop in BN_mod_sqrt() reachable when parsing certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0778

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-15 17:15 修改: 2026-04-14 10:16

openssl-libs CVE-2023-0286 高危 1:1.0.2k-16.el7 1:1.0.2k-26.el7_9 openssl: X.400 address type confusion in X.509 GeneralName

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-08 20:15 修改: 2025-11-04 20:16

pam CVE-2025-6020 高危 1.1.8-22.el7 1.1.8-23.el7_9.1 linux-pam: Linux-pam directory Traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-17 13:15 修改: 2026-05-12 13:17

pam CVE-2025-8941 高危 1.1.8-22.el7 1.1.8-23.el7_9.2 linux-pam: Incomplete fix for CVE-2025-6020

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8941

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-08-13 15:15 修改: 2026-04-15 00:35

python CVE-2019-10160 高危 2.7.5-76.el7 2.7.5-80.el7_6 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10160

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-07 18:29 修改: 2024-11-21 04:18

python CVE-2019-9636 高危 2.7.5-76.el7 2.7.5-77.el7_6 python: Information Disclosure due to urlsplit improper NFKC normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9636

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-08 21:29 修改: 2024-11-21 04:52

python CVE-2023-24329 高危 2.7.5-76.el7 2.7.5-93.el7_9 python: urllib.parse url blocklisting bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-17 15:15 修改: 2025-11-03 22:16

python CVE-2023-40217 高危 2.7.5-76.el7 2.7.5-94.el7_9 python: TLS handshake bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-25 01:15 修改: 2025-11-03 22:16

python CVE-2026-4519 高危 2.7.5-76.el7 2.7.5-94.el7_9.4 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-20 15:16 修改: 2026-04-16 14:53

python CVE-2026-4786 高危 2.7.5-76.el7 2.7.5-94.el7_9.5 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-13 22:16 修改: 2026-04-29 16:16

python CVE-2026-6100 高危 2.7.5-76.el7 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-13 18:16 修改: 2026-04-17 15:18

python-libs CVE-2019-10160 高危 2.7.5-76.el7 2.7.5-80.el7_6 python: regression of CVE-2019-9636 due to functional fix to allow port numbers in netloc

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-10160

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-07 18:29 修改: 2024-11-21 04:18

python-libs CVE-2019-9636 高危 2.7.5-76.el7 2.7.5-77.el7_6 python: Information Disclosure due to urlsplit improper NFKC normalization

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9636

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-08 21:29 修改: 2024-11-21 04:52

python-libs CVE-2023-24329 高危 2.7.5-76.el7 2.7.5-93.el7_9 python: urllib.parse url blocklisting bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-17 15:15 修改: 2025-11-03 22:16

python-libs CVE-2023-40217 高危 2.7.5-76.el7 2.7.5-94.el7_9 python: TLS handshake bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-25 01:15 修改: 2025-11-03 22:16

python-libs CVE-2026-4519 高危 2.7.5-76.el7 2.7.5-94.el7_9.4 python: Python: Command-line option injection in webbrowser.open() via crafted URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4519

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-20 15:16 修改: 2026-04-16 14:53

python-libs CVE-2026-4786 高危 2.7.5-76.el7 2.7.5-94.el7_9.5 python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4786

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-13 22:16 修改: 2026-04-29 16:16

python-libs CVE-2026-6100 高危 2.7.5-76.el7 python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6100

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-13 18:16 修改: 2026-04-17 15:18

sqlite CVE-2019-13734 高危 3.7.17-8.el7 3.7.17-8.el7_7.1 sqlite: fts3: improve shadow table corruption detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13734

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2025-6965 高危 3.7.17-8.el7 3.7.17-9.el7_9.1 sqlite: Integer Truncation in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6965

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-15 14:15 修改: 2026-04-14 10:16

systemd CVE-2018-15688 高危 219-62.el7 219-62.el7_6.2 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd CVE-2018-16864 高危 219-62.el7 219-62.el7_6.2 systemd: stack overflow when calling syslog from a command with long cmdline

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-11 20:29 修改: 2024-11-21 03:53

systemd CVE-2018-16865 高危 219-62.el7 219-62.el7_6.2 systemd: stack overflow when receiving many journald entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-11 21:29 修改: 2024-11-21 03:53

systemd CVE-2019-6454 高危 219-62.el7 219-62.el7_6.5 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-21 16:01 修改: 2024-11-21 04:46

systemd CVE-2022-2526 高危 219-62.el7 219-78.el7_9.7 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-09 15:15 修改: 2024-11-21 07:01

systemd-libs CVE-2018-15688 高危 219-62.el7 219-62.el7_6.2 systemd: Out-of-bounds heap write in systemd-networkd dhcpv6 option handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15688

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd-libs CVE-2018-16864 高危 219-62.el7 219-62.el7_6.2 systemd: stack overflow when calling syslog from a command with long cmdline

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16864

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-11 20:29 修改: 2024-11-21 03:53

systemd-libs CVE-2018-16865 高危 219-62.el7 219-62.el7_6.2 systemd: stack overflow when receiving many journald entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16865

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-11 21:29 修改: 2024-11-21 03:53

systemd-libs CVE-2019-6454 高危 219-62.el7 219-62.el7_6.5 systemd: Insufficient input validation in bus_process_object() resulting in PID 1 crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6454

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-21 16:01 修改: 2024-11-21 04:46

systemd-libs CVE-2022-2526 高危 219-62.el7 219-78.el7_9.7 systemd-resolved: use-after-free when dealing with DnsStream in resolved-dns-stream.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2526

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-09 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2019-12735 高危 2:7.4.160-5.el7 2:7.4.160-6.el7_6 vim/neovim: ': source!' command allows arbitrary command execution via modelines

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12735

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-05 14:29 修改: 2025-11-11 17:15

vim-minimal CVE-2026-33412 高危 2:7.4.160-5.el7 2:7.4.629-8.el7_9.1 vim: Vim: Arbitrary code execution via command injection in glob() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33412

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-24 20:16 修改: 2026-03-25 21:59

vim-minimal CVE-2026-34982 高危 2:7.4.160-5.el7 vim: arbitrary command execution via modeline sandbox bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34982

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-06 16:16 修改: 2026-04-22 20:10

xz CVE-2022-1271 高危 5.2.2-1.el7 5.2.2-2.el7_9 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15

xz-libs CVE-2022-1271 高危 5.2.2-1.el7 5.2.2-2.el7_9 gzip: arbitrary-file-write vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-31 16:15 修改: 2025-06-09 15:15

zlib CVE-2018-25032 高危 1.2.7-18.el7 1.2.7-20.el7_9 zlib: A flaw found in zlib when compressing (not decompressing) certain inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-25 09:15 修改: 2025-08-21 20:37

curl CVE-2025-14017 中危 7.29.0-59.el7_9.1 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-27 21:29

curl CVE-2025-9086 中危 7.29.0-59.el7_9.1 curl: libcurl: Curl out of bounds read for cookie path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2025-09-12 06:15 修改: 2026-06-02 14:16

curl CVE-2026-1965 中危 7.29.0-59.el7_9.1 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:15 修改: 2026-03-12 14:11

curl CVE-2026-3783 中危 7.29.0-59.el7_9.1 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:10

curl CVE-2026-3784 中危 7.29.0-59.el7_9.1 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:16 修改: 2026-06-02 14:16

curl CVE-2026-3805 中危 7.29.0-59.el7_9.1 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:08

curl CVE-2026-4873 中危 7.29.0-59.el7_9.1 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:45

curl CVE-2026-5545 中危 7.29.0-59.el7_9.1 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:31

curl CVE-2026-5773 中危 7.29.0-59.el7_9.1 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:13

curl CVE-2026-6253 中危 7.29.0-59.el7_9.1 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:40

curl CVE-2026-6429 中危 7.29.0-59.el7_9.1 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:18

curl CVE-2026-7168 中危 7.29.0-59.el7_9.1 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:12

bash CVE-2019-9924 中危 4.2.46-31.el7 4.2.46-34.el7 bash: BASH_CMD is writable in restricted bash shells

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9924

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-22 08:29 修改: 2024-11-21 04:52

cyrus-sasl-lib CVE-2019-19906 中危 2.1.26-23.el7 cyrus-sasl: denial of service in _sasl_add_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19906

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-19 18:15 修改: 2024-11-21 04:35

audit-libs CVE-2015-5186 中危 2.8.4-4.el7 Audit: log terminal emulator escape sequences handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5186

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-06 21:29 修改: 2026-05-13 00:24

dbus CVE-2014-3477 中危 1:1.10.24-12.el7 dbus: denial of service flaw in dbus-daemon

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3477

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-07-01 17:55 修改: 2026-05-06 22:30

dbus CVE-2014-3532 中危 1:1.10.24-12.el7 dbus: denial of service in file descriptor passing feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3532

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

dbus CVE-2014-3533 中危 1:1.10.24-12.el7 dbus: denial of service when forwarding invalid file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3533

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

dbus CVE-2019-12749 中危 1:1.10.24-12.el7 1:1.10.24-15.el7 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-11 17:29 修改: 2026-02-13 20:16

dbus CVE-2022-42010 中危 1:1.10.24-12.el7 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus CVE-2022-42011 中危 1:1.10.24-12.el7 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus CVE-2022-42012 中危 1:1.10.24-12.el7 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus CVE-2023-34969 中危 1:1.10.24-12.el7 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-08 03:15 修改: 2025-06-09 15:15

bash CVE-2012-6711 中危 4.2.46-31.el7 bash: heap-based buffer overflow during echo of unsupported characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-6711

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-18 18:15 修改: 2024-11-21 01:46

dbus-libs CVE-2014-3477 中危 1:1.10.24-12.el7 dbus: denial of service flaw in dbus-daemon

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3477

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-07-01 17:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3532 中危 1:1.10.24-12.el7 dbus: denial of service in file descriptor passing feature

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3532

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3533 中危 1:1.10.24-12.el7 dbus: denial of service when forwarding invalid file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3533

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-07-19 19:55 修改: 2026-05-06 22:30

dbus-libs CVE-2019-12749 中危 1:1.10.24-12.el7 1:1.10.24-15.el7 dbus: DBusServer DBUS_COOKIE_SHA1 authentication bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12749

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-11 17:29 修改: 2026-02-13 20:16

dbus-libs CVE-2022-42010 中危 1:1.10.24-12.el7 dbus: dbus-daemon crashes when receiving message with incorrectly nested parentheses and curly brackets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42010

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus-libs CVE-2022-42011 中危 1:1.10.24-12.el7 dbus: dbus-daemon can be crashed by messages with array length inconsistent with element type

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42011

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus-libs CVE-2022-42012 中危 1:1.10.24-12.el7 dbus: `_dbus_marshal_byteswap` doesn't process fds in messages with "foreign" endianness correctly

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42012

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-10 00:15 修改: 2025-06-09 15:15

dbus-libs CVE-2023-34969 中危 1:1.10.24-12.el7 dbus: dbus-daemon: assertion failure when a monitor is active and a message from the driver cannot be delivered

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-34969

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-08 03:15 修改: 2025-06-09 15:15

dracut CVE-2016-4484 中危 033-554.el7 dracut: Brute force attack on LUKS password decryption via initramfs

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4484

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-01-23 21:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2021-33294 中危 0.172-2.el7 elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-07-18 14:15 修改: 2024-11-21 06:08

elfutils-libelf CVE-2021-33294 中危 0.172-2.el7 elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-07-18 14:15 修改: 2024-11-21 06:08

elfutils-libs CVE-2021-33294 中危 0.172-2.el7 elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-07-18 14:15 修改: 2024-11-21 06:08

bind-license CVE-2018-5741 中危 32:9.9.4-72.el7 32:9.11.4-9.P2.el7 bind: Incorrect documentation of krb5-subdomain and ms-subdomain update policies

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5741

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-16 20:29 修改: 2024-11-21 04:09

bind-license CVE-2018-5742 中危 32:9.9.4-72.el7 32:9.9.4-73.el7_6 bind: Crash from assertion error when debug log level is 10 and log entries meet buffer boundary

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5742

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-30 14:15 修改: 2024-11-21 04:09

bind-license CVE-2019-6477 中危 32:9.9.4-72.el7 32:9.11.4-16.P2.el7 bind: TCP Pipelining doesn't limit TCP clients on a single connection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6477

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-26 16:15 修改: 2024-11-21 04:46

bind-license CVE-2020-8622 中危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.2 bind: truncated TSIG response can lead to an assertion failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8622

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-08-21 21:15 修改: 2024-11-21 05:39

bind-license CVE-2020-8623 中危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.2 bind: remotely triggerable assertion failure in pk11.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8623

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-08-21 21:15 修改: 2024-11-21 05:39

bind-license CVE-2020-8624 中危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.2 bind: incorrect enforcement of update-policy rules of type "subdomain"

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8624

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-08-21 21:15 修改: 2024-11-21 05:39

bind-license CVE-2021-25214 中危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.7 bind: Broken inbound incremental zone update (IXFR) can cause named to terminate unexpectedly

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25214

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-04-29 01:15 修改: 2024-11-21 05:54

bind-license CVE-2021-25219 中危 32:9.9.4-72.el7 bind: Lame cache can be abused to severely degrade resolver performance

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25219

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-10-27 21:15 修改: 2024-11-21 05:54

expat CVE-2012-6702 中危 2.1.0-10.el7_3 expat: Using XML_Parse before rand() results into non-random output

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-6702

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

expat CVE-2013-0340 中危 2.1.0-10.el7_3 expat: internal entity expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0340

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-01-21 18:55 修改: 2026-04-29 01:13

expat CVE-2015-2716 中危 2.1.0-10.el7_3 2.1.0-11.el7 expat: Integer overflow leading to buffer overflow in XML_GetBuffer()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2716

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-05-14 10:59 修改: 2026-05-06 22:30

expat CVE-2016-4472 中危 2.1.0-10.el7_3 expat: Undefined behavior and pointer overflows

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4472

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-30 17:59 修改: 2026-05-06 22:30

expat CVE-2016-5300 中危 2.1.0-10.el7_3 expat: Little entropy used for hash initialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5300

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-16 18:59 修改: 2026-05-06 22:30

expat CVE-2017-9233 中危 2.1.0-10.el7_3 expat: Inifinite loop due to invalid XML in external entity

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9233

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-25 20:29 修改: 2025-04-20 01:37

expat CVE-2018-20843 中危 2.1.0-10.el7_3 2.1.0-12.el7 expat: large number of colons in input makes parser consume high amount of resources, leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20843

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-24 17:15 修改: 2025-05-30 20:15

expat CVE-2021-45960 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Large number of prefixed XML attributes on a single tag can crash libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45960

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-01 19:15 修改: 2025-05-05 17:17

expat CVE-2021-46143 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in doProlog in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46143

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-06 04:15 修改: 2025-05-05 17:17

expat CVE-2022-22825 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in lookup in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22825

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22826 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in nextScaffoldPart in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22826

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-22827 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in storeAtts in xmlparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-22827

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-10 14:12 修改: 2025-05-05 17:17

expat CVE-2022-23852 中危 2.1.0-10.el7_3 2.1.0-14.el7_9 expat: Integer overflow in function XML_GetBuffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23852

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-24 02:15 修改: 2025-05-05 17:17

expat CVE-2022-23990 中危 2.1.0-10.el7_3 expat: integer overflow in the doProlog function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23990

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-26 19:15 修改: 2025-05-05 17:17

expat CVE-2022-25313 中危 2.1.0-10.el7_3 expat: Stack exhaustion in doctype parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25313

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-18 05:15 修改: 2025-05-30 20:15

expat CVE-2022-43680 中危 2.1.0-10.el7_3 expat: use-after free caused by overeager destruction of a shared DTD in XML_ExternalEntityParserCreate

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43680

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-24 14:15 修改: 2025-05-30 20:15

expat CVE-2023-52425 中危 2.1.0-10.el7_3 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-04 20:15 修改: 2025-11-04 19:16

expat CVE-2023-52426 中危 2.1.0-10.el7_3 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-04 20:15 修改: 2025-11-04 19:16

expat CVE-2024-45490 中危 2.1.0-10.el7_3 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-30 03:15 修改: 2026-05-12 12:17

expat CVE-2024-45491 中危 2.1.0-10.el7_3 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-30 03:15 修改: 2026-05-12 12:17

expat CVE-2024-45492 中危 2.1.0-10.el7_3 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-30 03:15 修改: 2026-05-12 12:17

expat CVE-2024-50602 中危 2.1.0-10.el7_3 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-10-27 05:15 修改: 2025-10-15 17:54

expat CVE-2024-8176 中危 2.1.0-10.el7_3 libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8176

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-03-14 09:15 修改: 2026-04-15 00:35

expat CVE-2026-32776 中危 2.1.0-10.el7_3 libexpat: libexpat: Denial of Service due to NULL pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32776

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-16 14:19 修改: 2026-03-17 15:52

expat CVE-2026-32777 中危 2.1.0-10.el7_3 libexpat: libexpat: Denial of Service via infinite loop in DTD content parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32777

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-16 14:19 修改: 2026-03-17 15:52

expat CVE-2026-32778 中危 2.1.0-10.el7_3 libexpat: libexpat: Denial of Service via NULL pointer dereference after out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32778

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-16 14:19 修改: 2026-03-17 15:52

bind-license CVE-2021-25220 中危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.13 bind: DNS forwarders - cache poisoning vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-25220

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-23 13:15 修改: 2024-11-21 05:54

glib2 CVE-2015-2327 中危 2.56.1-2.el7 pcre: infinite recursion compiling pattern with zero-repeated groups that include recursive back reference (8.36/19)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2327

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2015-2328 中危 2.56.1-2.el7 pcre: infinite recursion compiling pattern with recursive reference in a group with indefinite repeat (8.36/20)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2328

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2015-3217 中危 2.56.1-2.el7 pcre: stack overflow caused by mishandled group empty match (8.38/11)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3217

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-12-13 16:59 修改: 2026-05-06 22:30

glib2 CVE-2015-5073 中危 2.56.1-2.el7 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5073

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-12-13 16:59 修改: 2026-05-06 22:30

glib2 CVE-2015-8388 中危 2.56.1-2.el7 pcre: buffer overflow for forward reference within backward assertion with excess closing parenthesis (8.38/18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8388

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2015-8391 中危 2.56.1-2.el7 pcre: inefficient posix character class syntax check (8.38/16)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8391

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

glib2 CVE-2019-12450 中危 2.56.1-2.el7 2.56.1-7.el7 glib2: file_copy_fallback in gio/gfile.c in GNOME GLib does not properly restrict file permissions while a copy operation is in progress

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12450

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-29 17:29 修改: 2024-11-21 04:22

glib2 CVE-2019-14822 中危 2.56.1-2.el7 2.56.1-7.el7 ibus: missing authorization allows local attacker to access the input bus of another user

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14822

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-25 12:15 修改: 2024-11-21 04:27

glib2 CVE-2021-27218 中危 2.56.1-2.el7 glib: integer overflow in g_byte_array_new_take function when called with a buffer of 4GB or more on a 64-bit platform

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:57

glib2 CVE-2021-3800 中危 2.56.1-2.el7 glib2: Possible privilege escalation thourgh pkexec and aliases

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3800

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-23 16:15 修改: 2024-11-21 06:22

glib2 CVE-2024-34397 中危 2.56.1-2.el7 glib2: Signal subscription vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34397

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-07 18:15 修改: 2026-05-12 12:16

glib2 CVE-2024-52533 中危 2.56.1-2.el7 glib: buffer overflow in set_connect_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52533

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-11-11 23:15 修改: 2025-06-17 01:23

glib2 CVE-2025-13601 中危 2.56.1-2.el7 2.56.1-11.el7_9 glib: Integer overflow in in g_escape_uri_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13601

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-11-26 15:15 修改: 2026-06-02 14:16

glib2 CVE-2025-14087 中危 2.56.1-2.el7 2.56.1-12.el7_9 glib: GLib: Buffer underflow in GVariant parser leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14087

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-10 09:15 修改: 2026-06-02 20:16

glib2 CVE-2025-14512 中危 2.56.1-2.el7 glib: Integer Overflow in GLib GIO Attribute Escaping Causes Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14512

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-11 07:16 修改: 2026-06-02 20:16

glib2 CVE-2025-4373 中危 2.56.1-2.el7 glib: Buffer Underflow on GLib through glib/gstring.c via function g_string_insert_unichar

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4373

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-06 15:16 修改: 2026-05-12 13:17

glib2 CVE-2026-1484 中危 2.56.1-2.el7 Glib: Integer Overflow Leading to Buffer Underflow and Out-of-Bounds Write in GLib g_base64_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1484

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 14:15 修改: 2026-06-02 14:16

glib2 CVE-2026-1489 中危 2.56.1-2.el7 Glib: GLib: Memory corruption via integer overflow in Unicode case conversion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1489

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 15:15 修改: 2026-06-02 14:16

bind-license CVE-2022-2795 中危 32:9.9.4-72.el7 32:9.11.4-26.P2.el7_9.13 bind: processing large delegations may severely degrade resolver performance

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2795

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-21 11:15 修改: 2024-11-29 12:15

bind-license CVE-2022-3094 中危 32:9.9.4-72.el7 bind: flooding with UPDATE requests may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3094

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-26 21:15 修改: 2025-04-01 14:15

glibc CVE-2009-5155 中危 2.17-260.el7 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

漏洞详情: https://avd.aquasec.com/nvd/cve-2009-5155

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-26 02:29 修改: 2024-11-21 01:11

glibc CVE-2015-8983 中危 2.17-260.el7 glibc: _IO_wstr_overflow integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8983

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc CVE-2016-10739 中危 2.17-260.el7 2.17-292.el7 glibc: getaddrinfo should reject IP addresses with trailing characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10739

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-21 19:29 修改: 2024-11-21 02:44

glibc CVE-2016-1234 中危 2.17-260.el7 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1234

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-01 20:59 修改: 2026-05-06 22:30

glibc CVE-2016-4429 中危 2.17-260.el7 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4429

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-10 15:59 修改: 2026-05-06 22:30

glibc CVE-2017-8804 中危 2.17-260.el7 glibc: memory leak in sunrpc when decoding malformed XDR

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8804

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-07 18:29 修改: 2026-05-13 00:24

glibc CVE-2019-25013 中危 2.17-260.el7 2.17-322.el7_9 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-04 18:15 修改: 2025-06-09 16:15

glibc CVE-2019-9169 中危 2.17-260.el7 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:51

glibc CVE-2020-10029 中危 2.17-260.el7 2.17-322.el7_9 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-03-04 15:15 修改: 2024-11-21 04:54

glibc CVE-2020-1752 中危 2.17-260.el7 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-04-30 17:15 修改: 2024-11-21 05:11

glibc CVE-2020-29573 中危 2.17-260.el7 2.17-322.el7_9 glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29573

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-06 00:15 修改: 2024-11-21 05:24

glibc CVE-2021-35942 中危 2.17-260.el7 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-22 18:15 修改: 2026-02-13 21:16

glibc CVE-2021-3999 中危 2.17-260.el7 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-24 16:15 修改: 2025-12-02 21:15

glibc CVE-2022-23218 中危 2.17-260.el7 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc CVE-2022-23219 中危 2.17-260.el7 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc CVE-2023-4806 中危 2.17-260.el7 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-18 17:15 修改: 2026-05-12 11:16

glibc CVE-2023-4813 中危 2.17-260.el7 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-12 22:15 修改: 2025-09-26 12:15

glibc CVE-2023-5156 中危 2.17-260.el7 glibc: DoS due to memory leak in getaddrinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5156

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-25 16:15 修改: 2024-11-21 08:41

glibc CVE-2024-33600 中危 2.17-260.el7 2.17-326.el7_9.3 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc CVE-2025-0395 中危 2.17-260.el7 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-22 13:15 修改: 2026-05-12 13:16

glibc CVE-2025-4802 中危 2.17-260.el7 2.17-326.el7_9.5 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-16 20:15 修改: 2025-11-03 20:19

glibc CVE-2025-8058 中危 2.17-260.el7 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-23 20:15 修改: 2026-04-15 00:35

glibc CVE-2026-0915 中危 2.17-260.el7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 22:16 修改: 2026-01-23 19:36

glibc CVE-2026-4046 中危 2.17-260.el7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-30 18:16 修改: 2026-04-20 22:16

glibc CVE-2026-4437 中危 2.17-260.el7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:41

glibc CVE-2026-5435 中危 2.17-260.el7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38

glibc CVE-2026-5450 中危 2.17-260.el7 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

glibc CVE-2026-5928 中危 2.17-260.el7 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

bind-license CVE-2026-3592 中危 32:9.9.4-72.el7 bind: Amplification vulnerabilities via self-pointed glue records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3592

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

bind-license CVE-2026-5950 中危 32:9.9.4-72.el7 bind: Unbounded resend loop in BIND 9 resolver

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5950

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-20 13:16 修改: 2026-05-21 15:24

glibc-common CVE-2009-5155 中危 2.17-260.el7 glibc: parse_reg_exp in posix/regcomp.c misparses alternatives leading to denial of service or trigger incorrect result

漏洞详情: https://avd.aquasec.com/nvd/cve-2009-5155

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-26 02:29 修改: 2024-11-21 01:11

glibc-common CVE-2015-8983 中危 2.17-260.el7 glibc: _IO_wstr_overflow integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8983

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc-common CVE-2016-10739 中危 2.17-260.el7 2.17-292.el7 glibc: getaddrinfo should reject IP addresses with trailing characters

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10739

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-21 19:29 修改: 2024-11-21 02:44

glibc-common CVE-2016-1234 中危 2.17-260.el7 glibc: Stack-based buffer overflow in glob with GLOB_ALTDIRFUNC and crafted directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1234

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-01 20:59 修改: 2026-05-06 22:30

glibc-common CVE-2016-4429 中危 2.17-260.el7 glibc: libtirpc: stack (frame) overflow in Sun RPC clntudp_call()

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4429

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-10 15:59 修改: 2026-05-06 22:30

glibc-common CVE-2017-8804 中危 2.17-260.el7 glibc: memory leak in sunrpc when decoding malformed XDR

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8804

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-07 18:29 修改: 2026-05-13 00:24

glibc-common CVE-2019-25013 中危 2.17-260.el7 2.17-322.el7_9 glibc: buffer over-read in iconv when processing invalid multi-byte input sequences in the EUC-KR encoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-25013

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-04 18:15 修改: 2025-06-09 16:15

glibc-common CVE-2019-9169 中危 2.17-260.el7 glibc: regular-expression match via proceed_next_node in posix/regexec.c leads to heap-based buffer over-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9169

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:51

glibc-common CVE-2020-10029 中危 2.17-260.el7 2.17-322.el7_9 glibc: stack corruption from crafted input in cosl, sinl, sincosl, and tanl functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10029

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-03-04 15:15 修改: 2024-11-21 04:54

glibc-common CVE-2020-1752 中危 2.17-260.el7 glibc: use-after-free in glob() function when expanding ~user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1752

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-04-30 17:15 修改: 2024-11-21 05:11

glibc-common CVE-2020-29573 中危 2.17-260.el7 2.17-322.el7_9 glibc: stack-based buffer overflow if the input to any of the printf family of functions is an 80-bit long double with a non-canonical bit pattern

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29573

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-06 00:15 修改: 2024-11-21 05:24

glibc-common CVE-2021-35942 中危 2.17-260.el7 glibc: Arbitrary read in wordexp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35942

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-22 18:15 修改: 2026-02-13 21:16

glibc-common CVE-2021-3999 中危 2.17-260.el7 glibc: Off-by-one buffer overflow/underflow in getcwd()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-24 16:15 修改: 2025-12-02 21:15

glibc-common CVE-2022-23218 中危 2.17-260.el7 glibc: Stack-based buffer overflow in svcunix_create via long pathnames

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc-common CVE-2022-23219 中危 2.17-260.el7 glibc: Stack-based buffer overflow in sunrpc clnt_create via a long pathname

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23219

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-14 07:15 修改: 2025-05-05 17:17

glibc-common CVE-2023-4806 中危 2.17-260.el7 glibc: potential use-after-free in getaddrinfo()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-18 17:15 修改: 2026-05-12 11:16

glibc-common CVE-2023-4813 中危 2.17-260.el7 glibc: potential use-after-free in gaih_inet()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-12 22:15 修改: 2025-09-26 12:15

glibc-common CVE-2023-5156 中危 2.17-260.el7 glibc: DoS due to memory leak in getaddrinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5156

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-25 16:15 修改: 2024-11-21 08:41

glibc-common CVE-2024-33600 中危 2.17-260.el7 2.17-326.el7_9.3 glibc: null pointer dereferences after failed netgroup cache insertion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc-common CVE-2025-0395 中危 2.17-260.el7 glibc: buffer overflow in the GNU C Library's assert()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-22 13:15 修改: 2026-05-12 13:16

glibc-common CVE-2025-4802 中危 2.17-260.el7 2.17-326.el7_9.5 glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-16 20:15 修改: 2025-11-03 20:19

glibc-common CVE-2025-8058 中危 2.17-260.el7 glibc: Double free in glibc

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-23 20:15 修改: 2026-04-15 00:35

glibc-common CVE-2026-0915 中危 2.17-260.el7 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 22:16 修改: 2026-01-23 19:36

glibc-common CVE-2026-4046 中危 2.17-260.el7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-30 18:16 修改: 2026-04-20 22:16

glibc-common CVE-2026-4437 中危 2.17-260.el7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:41

glibc-common CVE-2026-5435 中危 2.17-260.el7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38

glibc-common CVE-2026-5450 中危 2.17-260.el7 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

glibc-common CVE-2026-5928 中危 2.17-260.el7 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33

gmp CVE-2021-43618 中危 1:6.0.0-15.el7 gmp: Integer overflow and resultant buffer overflow via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43618

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-15 04:15 修改: 2024-11-21 06:29

binutils CVE-2017-6965 中危 2.27-34.base.el7 binutils: Heap-based buffer overflow in target_specific_reloc_handling in readelf

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6965

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-17 09:59 修改: 2026-05-13 00:24

gnupg2 CVE-2014-4617 中危 2.0.22-5.el7_5 gnupg: infinite loop when decompressing data packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-4617

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-06-25 11:19 修改: 2026-05-06 22:30

gnupg2 CVE-2019-13050 中危 2.0.22-5.el7_5 GnuPG: interaction between the sks-keyserver code and GnuPG allows for a Certificate Spamming Attack which leads to persistent DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13050

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-29 17:15 修改: 2024-11-21 04:24

gnupg2 CVE-2022-34903 中危 2.0.22-5.el7_5 gpg: Signature spoofing via status line injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-01 22:15 修改: 2024-11-21 07:10

gnupg2 CVE-2025-68972 中危 2.0.22-5.el7_5 gnupg: GnuPG: Signature bypass via form feed character in signed messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-27 23:15 修改: 2026-01-09 20:08

binutils CVE-2017-6966 中危 2.27-34.base.el7 binutils: Use-after-free in target_specific_reloc_handling in readelf

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6966

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-17 09:59 修改: 2026-05-13 00:24

iputils CVE-2025-47268 中危 20160308-10.el7 iputils: Signed Integer Overflow in Timestamp Multiplication in iputils ping

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47268

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-05 14:15 修改: 2026-04-06 14:12

iputils CVE-2025-48964 中危 20160308-10.el7 iputils: iputils integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48964

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-22 18:15 修改: 2026-04-15 00:35

json-c CVE-2020-12762 中危 0.11-4.el7_0 libfastjson: integer overflow and out-of-bounds write via a large JSON file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12762

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-05-09 18:15 修改: 2025-11-03 20:15

binutils CVE-2018-1000876 中危 2.27-34.base.el7 2.27-41.base.el7 binutils: integer overflow leads to heap-based buffer overflow in objdump

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000876

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-12-20 17:29 修改: 2024-11-21 03:40

binutils CVE-2018-18483 中危 2.27-34.base.el7 binutils: Integer overflow in cplus-dem.c:get_count() allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18483

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-18 21:29 修改: 2024-11-21 03:56

krb5-libs CVE-2014-5351 中危 1.15.1-34.el7 krb5: current keys returned when randomizing the keys for a service principal

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5351

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-10-10 01:55 修改: 2026-05-06 22:30

krb5-libs CVE-2015-2695 中危 1.15.1-34.el7 krb5: SPNEGO context aliasing bugs

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2695

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-09 03:59 修改: 2026-05-06 22:30

krb5-libs CVE-2015-2696 中危 1.15.1-34.el7 krb5: IAKERB context aliasing flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2696

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-09 03:59 修改: 2026-05-06 22:30

krb5-libs CVE-2015-2697 中危 1.15.1-34.el7 krb5: build_principal() memory flaw

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2697

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-09 03:59 修改: 2026-05-06 22:30

krb5-libs CVE-2017-15088 中危 1.15.1-34.el7 krb5: Buffer overflow in get_matching_data()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15088

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-23 17:29 修改: 2025-04-20 01:37

krb5-libs CVE-2018-20217 中危 1.15.1-34.el7 1.15.1-37.el7_7.2 krb5: Reachable assertion in the KDC using S4U2Self requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20217

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-12-26 21:29 修改: 2024-11-21 04:01

krb5-libs CVE-2020-17049 中危 1.15.1-34.el7 Kerberos: delegation constrain bypass in S4U2Proxy

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-17049

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-11 07:15 修改: 2024-11-21 05:07

krb5-libs CVE-2020-28196 中危 1.15.1-34.el7 krb5: unbounded recursion via an ASN.1-encoded Kerberos message in lib/krb5/asn.1/asn1_encode.c may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28196

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-06 08:15 修改: 2025-12-03 19:15

krb5-libs CVE-2021-36222 中危 1.15.1-34.el7 krb5: Sending a request containing PA-ENCRYPTED-CHALLENGE padata element without using FAST could result in NULL dereference in KDC which leads to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36222

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-22 18:15 修改: 2024-11-21 06:13

krb5-libs CVE-2021-37750 中危 1.15.1-34.el7 1.15.1-51.el7_9 krb5: NULL pointer dereference in process_tgs_req() in kdc/do_tgs_req.c via a FAST inner body that lacks server field

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37750

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-08-23 05:15 修改: 2024-11-21 06:15

krb5-libs CVE-2024-26462 中危 1.15.1-34.el7 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-29 01:44 修改: 2025-03-25 20:15

krb5-libs CVE-2024-37370 中危 1.15.1-34.el7 1.15.1-55.el7_9.2 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-28 22:15 修改: 2026-05-12 12:16

krb5-libs CVE-2024-37371 中危 1.15.1-34.el7 1.15.1-55.el7_9.2 krb5: GSS message token handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-28 23:15 修改: 2026-05-12 12:16

krb5-libs CVE-2025-24528 中危 1.15.1-34.el7 1.15.1-55.el7_9.4 krb5: overflow when calculating ulog block size

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-16 18:16 修改: 2026-04-15 00:35

krb5-libs CVE-2025-3576 中危 1.15.1-34.el7 krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-15 06:15 修改: 2026-05-12 13:17

krb5-libs CVE-2026-40355 中危 1.15.1-34.el7 krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-28 06:16 修改: 2026-04-28 20:11

krb5-libs CVE-2026-40356 中危 1.15.1-34.el7 krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-28 07:16 修改: 2026-04-28 20:11

libblkid CVE-2014-9114 中危 2.23.2-59.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

libblkid CVE-2016-2779 中危 2.23.2-59.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

libblkid CVE-2020-21583 中危 2.23.2-59.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

libblkid CVE-2022-0563 中危 2.23.2-59.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

libblkid CVE-2025-14104 中危 2.23.2-59.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

binutils CVE-2018-20673 中危 2.27-34.base.el7 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

libcap CVE-2023-2603 中危 2.22-9.el7 libcap: Integer Overflow in _libcap_strdup()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2603

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-06 20:15 修改: 2025-12-02 21:15

libcom_err CVE-2015-0247 中危 1.42.9-13.el7 e2fsprogs: ext2fs_open2() missing first_meta_bg boundary check leading to heap buffer overflow (oCERT-015-002)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0247

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-02-17 15:59 修改: 2026-05-06 22:30

libcom_err CVE-2019-5094 中危 1.42.9-13.el7 1.42.9-19.el7 e2fsprogs: Crafted ext4 partition leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5094

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-24 22:15 修改: 2025-05-30 19:15

libcom_err CVE-2019-5188 中危 1.42.9-13.el7 1.42.9-19.el7 e2fsprogs: Out-of-bounds write in e2fsck/rehash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5188

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 16:15 修改: 2024-11-21 04:44

libcom_err CVE-2022-1304 中危 1.42.9-13.el7 e2fsprogs: out-of-bounds read/write via crafted filesystem

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-04-14 21:15 修改: 2025-04-23 19:15

libcurl CVE-2015-3153 中危 7.29.0-59.el7_9.1 curl: sensitive HTTP server headers also sent to proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3153

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2015-05-01 15:59 修改: 2026-05-06 22:30

libcurl CVE-2016-8615 中危 7.29.0-59.el7_9.1 curl: Cookie injection for other servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8615

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8617 中危 7.29.0-59.el7_9.1 curl: Out-of-bounds write via unchecked multiplication

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8617

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8618 中危 7.29.0-59.el7_9.1 curl: Double-free in curl_maprintf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8618

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8619 中危 7.29.0-59.el7_9.1 curl: Double-free in krb5 code

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8619

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8624 中危 7.29.0-59.el7_9.1 curl: Invalid URL parsing with '#'

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8624

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8625 中危 7.29.0-59.el7_9.1 curl: IDNA 2003 makes curl use wrong host

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8625

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2017-1000254 中危 7.29.0-59.el7_9.1 curl: FTP PWD response parser out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000254

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-10-06 13:29 修改: 2026-05-13 00:24

libcurl CVE-2017-8817 中危 7.29.0-59.el7_9.1 curl: FTP wildcard out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8817

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-11-29 18:29 修改: 2026-04-15 21:16

libcurl CVE-2020-8284 中危 7.29.0-59.el7_9.1 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

libcurl CVE-2020-8285 中危 7.29.0-59.el7_9.1 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

libcurl CVE-2021-22876 中危 7.29.0-59.el7_9.1 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-04-01 18:15 修改: 2025-06-09 15:15

libcurl CVE-2021-22924 中危 7.29.0-59.el7_9.1 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-08-05 21:15 修改: 2025-06-09 15:15

libcurl CVE-2021-22946 中危 7.29.0-59.el7_9.1 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

libcurl CVE-2021-22947 中危 7.29.0-59.el7_9.1 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

libcurl CVE-2022-27774 中危 7.29.0-59.el7_9.1 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

libcurl CVE-2022-27776 中危 7.29.0-59.el7_9.1 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27778 中危 7.29.0-59.el7_9.1 curl: removes wrong file on error

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27778

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27779 中危 7.29.0-59.el7_9.1 curl: cookie for trailing dot TLD

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27779

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27780 中危 7.29.0-59.el7_9.1 curl: percent-encoded path separator in URL host

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27780

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

libcurl CVE-2022-27782 中危 7.29.0-59.el7_9.1 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

libcurl CVE-2022-30115 中危 7.29.0-59.el7_9.1 curl: HSTS bypass via trailing dot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30115

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 07:02

libcurl CVE-2022-32208 中危 7.29.0-59.el7_9.1 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-07-07 13:15 修改: 2025-05-05 17:18

libcurl CVE-2022-43551 中危 7.29.0-59.el7_9.1 curl: HSTS bypass via IDN

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-12-23 15:15 修改: 2026-02-13 20:16

libcurl CVE-2023-27535 中危 7.29.0-59.el7_9.1 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

libcurl CVE-2023-27536 中危 7.29.0-59.el7_9.1 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-02-14 16:15

libcurl CVE-2023-27538 中危 7.29.0-59.el7_9.1 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

libcurl CVE-2023-28321 中危 7.29.0-59.el7_9.1 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-05-26 21:15 修改: 2025-01-15 16:15

libcurl CVE-2024-2398 中危 7.29.0-59.el7_9.1 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2024-03-27 08:15 修改: 2025-07-30 19:42

libcurl CVE-2025-13034 中危 7.29.0-59.el7_9.1 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:54

libcurl CVE-2025-14017 中危 7.29.0-59.el7_9.1 curl: curl: Security bypass due to global TLS option changes in multi-threaded LDAPS transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14017

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-27 21:29

libcurl CVE-2025-9086 中危 7.29.0-59.el7_9.1 curl: libcurl: Curl out of bounds read for cookie path

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9086

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2025-09-12 06:15 修改: 2026-06-02 14:16

libcurl CVE-2026-1965 中危 7.29.0-59.el7_9.1 curl: curl: Authentication bypass due to incorrect connection reuse with Negotiate authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1965

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:15 修改: 2026-03-12 14:11

libcurl CVE-2026-3783 中危 7.29.0-59.el7_9.1 curl: curl: Information disclosure via OAuth2 bearer token leakage during HTTP(S) redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3783

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:10

libcurl CVE-2026-3784 中危 7.29.0-59.el7_9.1 curl: curl: Unauthorized access due to improper HTTP proxy connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3784

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:16 修改: 2026-06-02 14:16

libcurl CVE-2026-3805 中危 7.29.0-59.el7_9.1 curl: curl: Arbitrary code execution or Denial of Service via use-after-free in SMB request handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3805

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-11 11:16 修改: 2026-03-12 14:08

libcurl CVE-2026-4873 中危 7.29.0-59.el7_9.1 curl: curl: Information disclosure due to incorrect TLS connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4873

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:45

libcurl CVE-2026-5545 中危 7.29.0-59.el7_9.1 curl: libcurl: Authentication bypass due to incorrect HTTP Negotiate connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5545

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:31

libcurl CVE-2026-5773 中危 7.29.0-59.el7_9.1 curl: libcurl: Wrong file transfer due to incorrect SMB connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5773

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-13 19:13

libcurl CVE-2026-6253 中危 7.29.0-59.el7_9.1 curl: curl: Proxy credential disclosure via redirects to unauthenticated proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6253

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 13:40

libcurl CVE-2026-6429 中危 7.29.0-59.el7_9.1 curl: libcurl: Credential leak via reused proxy connection during HTTP redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6429

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:18

libcurl CVE-2026-7168 中危 7.29.0-59.el7_9.1 curl: libcurl: Information disclosure via incorrect Proxy-Authorization header reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7168

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:12

libdb CVE-2017-10140 中危 5.3.21-24.el7 libdb: Reads DB_CONFIG from the current working directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10140

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-04-16 17:29 修改: 2024-11-21 03:05

libdb-utils CVE-2017-10140 中危 5.3.21-24.el7 libdb: Reads DB_CONFIG from the current working directory

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10140

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-04-16 17:29 修改: 2024-11-21 03:05

libgcc CVE-2014-5044 中危 4.8.5-36.el7 gcc: integer overflow flaws in libgfortran

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5044

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-03-07 15:29 修改: 2024-11-21 02:11

libgcc CVE-2018-20673 中危 4.8.5-36.el7 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

libgcc CVE-2019-16276 中危 4.8.5-36.el7 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16276

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-30 19:15 修改: 2024-11-21 04:30

libgcc CVE-2020-11023 中危 4.8.5-36.el7 4.8.5-45.el7_9 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-04-29 21:15 修改: 2025-11-07 19:32

libgcc CVE-2020-16845 中危 4.8.5-36.el7 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-08-06 18:15 修改: 2024-11-21 05:07

libgcc CVE-2020-24553 中危 4.8.5-36.el7 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14

libgcc CVE-2020-28362 中危 4.8.5-36.el7 golang: math/big: panic during recursive division of very large numbers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28362

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgcc CVE-2020-28366 中危 4.8.5-36.el7 golang: malicious symbol names can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28366

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgcc CVE-2020-28367 中危 4.8.5-36.el7 golang: improper validation of cgo flags can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28367

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libgcc CVE-2021-27918 中危 4.8.5-36.el7 golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58

libgcc CVE-2021-42574 中危 4.8.5-36.el7 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

libgcrypt CVE-2014-5270 中危 1.5.3-14.el7 libgcrypt: ELGAMAL side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5270

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-10-10 01:55 修改: 2026-05-06 22:30

libgcrypt CVE-2017-7526 中危 1.5.3-14.el7 libgcrypt: Use of left-to-right sliding window method allows full RSA key recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7526

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-07-26 13:29 修改: 2024-11-21 03:32

libgcrypt CVE-2019-12904 中危 1.5.3-14.el7 Libgcrypt: physical addresses being available to other processes leads to a flush-and-reload side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12904

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-20 00:15 修改: 2024-11-21 04:23

libgcrypt CVE-2021-33560 中危 1.5.3-14.el7 libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-06-08 11:15 修改: 2025-12-03 15:15

libgcrypt CVE-2021-40528 中危 1.5.3-14.el7 libgcrypt: ElGamal implementation allows plaintext recovery

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40528

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-09-06 19:15 修改: 2025-06-09 16:15

libgcrypt CVE-2024-2236 中危 1.5.3-14.el7 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-03-06 22:15 修改: 2026-04-15 00:35

libgcrypt CVE-2026-41989 中危 1.5.3-14.el7 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-23 05:16 修改: 2026-04-27 18:33

libmount CVE-2014-9114 中危 2.23.2-59.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

libmount CVE-2016-2779 中危 2.23.2-59.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

libmount CVE-2020-21583 中危 2.23.2-59.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

libmount CVE-2022-0563 中危 2.23.2-59.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

libmount CVE-2025-14104 中危 2.23.2-59.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

libsepol CVE-2021-36084 中危 2.5-10.el7 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-01 03:15 修改: 2025-11-03 22:15

libsepol CVE-2021-36085 中危 2.5-10.el7 libsepol: use-after-free in __cil_verify_classperms()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-01 03:15 修改: 2025-11-03 22:15

libsepol CVE-2021-36086 中危 2.5-10.el7 libsepol: use-after-free in cil_reset_classpermission()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-01 03:15 修改: 2026-03-24 20:25

libsepol CVE-2021-36087 中危 2.5-10.el7 libsepol: heap-based buffer overflow in ebitmap_match_any()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-01 03:15 修改: 2025-11-03 22:15

binutils CVE-2019-9074 中危 2.27-34.base.el7 binutils: out-of-bound read in function bfd_getl32 in libbfd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9074

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-24 00:29 修改: 2024-11-21 04:50

libssh2 CVE-2019-13115 中危 1.8.0-4.el7 libssh2: integer overflow in kex_method_diffie_hellman_group_exchange_sha256_key_exchange in kex.c leads to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13115

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2019-07-16 18:15 修改: 2024-11-21 04:24

libssh2 CVE-2019-3859 中危 1.8.0-4.el7 libssh2: Unchecked use of _libssh2_packet_require and _libssh2_packet_requirev resulting in out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3859

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2019-03-21 16:01 修改: 2025-12-18 12:15

libssh2 CVE-2019-3860 中危 1.8.0-4.el7 libssh2: Out-of-bounds reads with specially crafted SFTP packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3860

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2019-03-25 19:29 修改: 2024-11-21 04:42

libssh2 CVE-2020-22218 中危 1.8.0-4.el7 1.8.0-4.el7_9.1 libssh2: use-of-uninitialized-value in _libssh2_transport_read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-22218

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:13

libssh2 CVE-2023-2283 中危 1.8.0-4.el7 libssh: authorization bypass in pki_verify_data_signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2283

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-05-26 18:15 修改: 2025-11-03 21:15

libssh2 CVE-2023-48795 中危 1.8.0-4.el7 ssh: Prefix truncation attack on Binary Packet Protocol (BPP)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-12-18 16:15 修改: 2026-05-12 11:16

libssh2 CVE-2025-5351 中危 1.8.0-4.el7 libssh: Double Free Vulnerability in libssh Key Export Functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5351

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2025-07-04 09:15 修改: 2026-05-19 14:16

libssh2 CVE-2025-5372 中危 1.8.0-4.el7 libssh: Incorrect Return Code Handling in ssh_kdf() in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5372

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2025-07-04 06:15 修改: 2026-05-26 07:16

libssh2 CVE-2025-5987 中危 1.8.0-4.el7 libssh: Invalid return code for chacha20 poly1305 with OpenSSL backend

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5987

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2025-07-07 15:15 修改: 2026-03-20 21:17

libssh2 CVE-2026-3731 中危 1.8.0-4.el7 libssh: libssh: Denial of Service via out-of-bounds read in SFTP extension name handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3731

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-03-08 11:15 修改: 2026-03-12 19:02

libstdc++ CVE-2014-5044 中危 4.8.5-36.el7 gcc: integer overflow flaws in libgfortran

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5044

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-03-07 15:29 修改: 2024-11-21 02:11

libstdc++ CVE-2018-20673 中危 4.8.5-36.el7 libiberty: Integer overflow in demangle_template() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20673

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-04 18:29 修改: 2024-11-21 04:01

libstdc++ CVE-2019-16276 中危 4.8.5-36.el7 golang: HTTP/1.1 headers with a space before the colon leads to filter bypass or request smuggling

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16276

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-30 19:15 修改: 2024-11-21 04:30

libstdc++ CVE-2020-11023 中危 4.8.5-36.el7 4.8.5-45.el7_9 jquery: Untrusted code execution via <option> tag in HTML passed to DOM manipulation methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-11023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-04-29 21:15 修改: 2025-11-07 19:32

libstdc++ CVE-2020-16845 中危 4.8.5-36.el7 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-08-06 18:15 修改: 2024-11-21 05:07

libstdc++ CVE-2020-24553 中危 4.8.5-36.el7 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14

libstdc++ CVE-2020-28362 中危 4.8.5-36.el7 golang: math/big: panic during recursive division of very large numbers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28362

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libstdc++ CVE-2020-28366 中危 4.8.5-36.el7 golang: malicious symbol names can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28366

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libstdc++ CVE-2020-28367 中危 4.8.5-36.el7 golang: improper validation of cgo flags can lead to code execution at build time

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-28367

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-11-18 17:15 修改: 2024-11-21 05:22

libstdc++ CVE-2021-27918 中危 4.8.5-36.el7 golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58

libstdc++ CVE-2021-42574 中危 4.8.5-36.el7 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

libtasn1 CVE-2016-4008 中危 4.10-1.el7 libtasn1: infinite loop while parsing DER certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4008

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-05-05 18:59 修改: 2026-05-06 22:30

libtasn1 CVE-2018-6003 中危 4.10-1.el7 libtasn1: Stack exhaustion due to indefinite recursion during BER decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6003

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-01-22 20:29 修改: 2024-11-21 04:09

libtasn1 CVE-2021-46848 中危 4.10-1.el7 libtasn1: Out-of-bound access in ETYPE_OK

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-24 14:15 修改: 2025-05-07 15:15

libtasn1 CVE-2024-12133 中危 4.10-1.el7 libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-10 16:15 修改: 2026-05-12 12:16

libuuid CVE-2014-9114 中危 2.23.2-59.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

libuuid CVE-2016-2779 中危 2.23.2-59.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

libuuid CVE-2020-21583 中危 2.23.2-59.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

libuuid CVE-2022-0563 中危 2.23.2-59.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

libuuid CVE-2025-14104 中危 2.23.2-59.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

binutils CVE-2019-9075 中危 2.27-34.base.el7 binutils: heap-based buffer overflow in function _bfd_archive_64_bit_slurp_armap in archive64.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9075

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-24 00:29 修改: 2024-11-21 04:50

binutils CVE-2019-9077 中危 2.27-34.base.el7 binutils: heap-based buffer overflow in function process_mips_specific in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9077

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-24 00:29 修改: 2024-11-21 04:50

binutils CVE-2020-16590 中危 2.27-34.base.el7 binutils: double free vulnerability in process_symbol_table could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16590

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

binutils CVE-2020-16592 中危 2.27-34.base.el7 binutils: use-after-free in bfd_hash_lookup could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16592

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

binutils CVE-2021-20197 中危 2.27-34.base.el7 binutils: Race window allows users to own arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20197

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-26 17:15 修改: 2025-12-03 15:15

libxml2 CVE-2015-8035 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: DoS caused by incorrect error detection during XZ decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8035

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-18 16:59 修改: 2026-05-06 22:30

libxml2 CVE-2016-3709 中危 2.9.1-6.el7_2.3 libxml2: Incorrect server side include parsing can lead to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3709

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-28 17:15 修改: 2025-11-04 16:15

libxml2 CVE-2016-4483 中危 2.9.1-6.el7_2.3 libxml2: out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4483

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2 CVE-2016-4658 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.6 libxml2: Use after free via namespace node in XPointer ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4658

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-25 10:59 修改: 2026-05-06 22:30

libxml2 CVE-2016-5131 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free triggered by XPointer paths beginning with range-to

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5131

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-07-23 19:59 修改: 2026-05-06 22:30

libxml2 CVE-2016-9318 中危 2.9.1-6.el7_2.3 libxml2: XML External Entity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9318

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-11-16 00:59 修改: 2026-05-06 22:30

libxml2 CVE-2017-0663 中危 2.9.1-6.el7_2.3 libxml2: Heap buffer overflow in xmlAddID

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-0663

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-14 13:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-15412 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15412

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-28 19:29 修改: 2024-11-21 03:14

libxml2 CVE-2017-16931 中危 2.9.1-6.el7_2.3 libxml2: Mishandling parameter-entity references

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16931

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-23 21:29 修改: 2025-04-20 01:37

libxml2 CVE-2017-16932 中危 2.9.1-6.el7_2.3 libxml2: Infinite recursion in parameter entities

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16932

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-23 21:29 修改: 2026-01-22 18:16

libxml2 CVE-2017-7375 中危 2.9.1-6.el7_2.3 libxml2: Missing validation for external entities in xmlParsePEReference

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7375

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-19 19:29 修改: 2025-12-03 22:15

libxml2 CVE-2017-9047 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9047

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-9049 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9049

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-9050 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictAddString

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9050

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2018-14404 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-07-19 13:29 修改: 2025-12-03 21:15

libxml2 CVE-2019-19956 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19956

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-24 16:15 修改: 2025-12-03 19:15

libxml2 CVE-2019-20388 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20388

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-21 23:15 修改: 2025-12-17 22:15

libxml2 CVE-2020-24977 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24977

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-04 00:15 修改: 2024-11-21 05:16

libxml2 CVE-2020-7595 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7595

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-21 23:15 修改: 2025-12-03 16:15

libxml2 CVE-2021-3516 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3516

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-06-01 14:15 修改: 2024-11-21 06:21

libxml2 CVE-2021-3517 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3517

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-19 14:15 修改: 2025-12-02 22:16

libxml2 CVE-2021-3518 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3518

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-18 12:15 修改: 2024-11-21 06:21

libxml2 CVE-2021-3537 中危 2.9.1-6.el7_2.3 libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3537

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-14 20:15 修改: 2024-11-21 06:21

libxml2 CVE-2021-3541 中危 2.9.1-6.el7_2.3 libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3541

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-09 17:15 修改: 2024-11-21 06:21

libxml2 CVE-2022-23308 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free of ID and IDREF attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23308

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-26 05:15 修改: 2025-05-05 17:17

libxml2 CVE-2022-29824 中危 2.9.1-6.el7_2.3 libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29824

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-05-03 03:15 修改: 2024-11-21 06:59

libxml2 CVE-2022-40303 中危 2.9.1-6.el7_2.3 libxml2: integer overflows with XML_PARSE_HUGE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40303

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-23 00:15 修改: 2025-04-29 05:15

libxml2 CVE-2022-40304 中危 2.9.1-6.el7_2.3 libxml2: dict corruption caused by entity reference cycles

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40304

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-23 18:15 修改: 2025-04-28 20:15

libxml2 CVE-2022-49043 中危 2.9.1-6.el7_2.3 libxml: use-after-free in xmlXIncludeAddNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-49043

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-26 06:15 修改: 2025-11-03 21:15

libxml2 CVE-2023-28484 中危 2.9.1-6.el7_2.3 libxml2: NULL dereference in xmlSchemaFixupComplexType

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28484

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-24 21:15 修改: 2025-05-30 20:15

libxml2 CVE-2023-29469 中危 2.9.1-6.el7_2.3 libxml2: Hashing of empty dict strings isn't deterministic

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29469

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-24 21:15 修改: 2025-02-04 21:15

libxml2 CVE-2023-39615 中危 2.9.1-6.el7_2.3 libxml2: crafted xml can cause global buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-29 17:15 修改: 2025-11-03 21:15

libxml2 CVE-2024-25062 中危 2.9.1-6.el7_2.3 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-04 16:15 修改: 2025-11-03 22:16

libxml2 CVE-2025-32414 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Out-of-Bounds Read in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32414

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-08 03:15 修改: 2025-11-03 20:18

libxml2 CVE-2025-32415 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.13 libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32415

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-17 17:15 修改: 2025-11-03 20:18

libxml2 CVE-2025-6021 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6021

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-12 13:15 修改: 2026-05-12 13:17

libxml2 CVE-2025-9714 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.14 libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9714

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-09-10 19:15 修改: 2026-05-12 13:17

libxml2 CVE-2026-0990 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2 CVE-2026-1757 中危 2.9.1-6.el7_2.3 libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1757

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-02 13:15 修改: 2026-04-22 10:16

libxml2 CVE-2026-6732 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-23 23:16 修改: 2026-05-15 14:36

binutils CVE-2021-20294 中危 2.27-34.base.el7 binutils: stack buffer overflow WRITE may lead to a DoS via a crafted ELF

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20294

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-04-29 16:15 修改: 2024-11-21 05:46

binutils CVE-2021-37322 中危 2.27-34.base.el7 binutils: use-after-free in c++filt in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37322

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-18 22:15 修改: 2024-11-21 06:14

binutils CVE-2021-42574 中危 2.27-34.base.el7 2.27-44.base.el7_9.1 environment: Unicode's bidirectional (BiDi) override characters can cause trojan source attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-42574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-01 04:15 修改: 2024-11-21 06:27

binutils CVE-2021-45078 中危 2.27-34.base.el7 binutils: out-of-bounds write in stab_xcoff_builtin_type() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45078

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-15 20:15 修改: 2024-11-21 06:31

binutils CVE-2022-4285 中危 2.27-34.base.el7 binutils: NULL pointer dereference in _bfd_elf_get_symbol_version_string leads to segfault

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4285

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-27 18:15 修改: 2025-03-28 16:15

libxml2-python CVE-2015-8035 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: DoS caused by incorrect error detection during XZ decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8035

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-18 16:59 修改: 2026-05-06 22:30

libxml2-python CVE-2016-3709 中危 2.9.1-6.el7_2.3 libxml2: Incorrect server side include parsing can lead to XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3709

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-28 17:15 修改: 2025-11-04 16:15

libxml2-python CVE-2016-4483 中危 2.9.1-6.el7_2.3 libxml2: out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4483

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2-python CVE-2016-4658 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.6 libxml2: Use after free via namespace node in XPointer ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4658

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-25 10:59 修改: 2026-05-06 22:30

libxml2-python CVE-2016-5131 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free triggered by XPointer paths beginning with range-to

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-5131

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-07-23 19:59 修改: 2026-05-06 22:30

libxml2-python CVE-2016-9318 中危 2.9.1-6.el7_2.3 libxml2: XML External Entity vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9318

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-11-16 00:59 修改: 2026-05-06 22:30

libxml2-python CVE-2017-0663 中危 2.9.1-6.el7_2.3 libxml2: Heap buffer overflow in xmlAddID

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-0663

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-14 13:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-15412 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Use after free in xmlXPathCompOpEvalPositionalPredicate() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15412

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-28 19:29 修改: 2024-11-21 03:14

libxml2-python CVE-2017-16931 中危 2.9.1-6.el7_2.3 libxml2: Mishandling parameter-entity references

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16931

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-23 21:29 修改: 2025-04-20 01:37

libxml2-python CVE-2017-16932 中危 2.9.1-6.el7_2.3 libxml2: Infinite recursion in parameter entities

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16932

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-23 21:29 修改: 2026-01-22 18:16

libxml2-python CVE-2017-7375 中危 2.9.1-6.el7_2.3 libxml2: Missing validation for external entities in xmlParsePEReference

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7375

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-19 19:29 修改: 2025-12-03 22:15

libxml2-python CVE-2017-9047 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9047

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-9049 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictComputeFastKey

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9049

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-9050 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer over-read in function xmlDictAddString

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9050

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2018-14404 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: NULL pointer dereference in xmlXPathCompOpEval() function in xpath.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-07-19 13:29 修改: 2025-12-03 21:15

libxml2-python CVE-2019-19956 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlParseBalancedChunkMemoryRecover in parser.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19956

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-24 16:15 修改: 2025-12-03 19:15

libxml2-python CVE-2019-20388 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: memory leak in xmlSchemaPreRun in xmlschemas.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20388

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-21 23:15 修改: 2025-12-17 22:15

libxml2-python CVE-2020-24977 中危 2.9.1-6.el7_2.3 libxml2: Buffer overflow vulnerability in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24977

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-04 00:15 修改: 2024-11-21 05:16

libxml2-python CVE-2020-7595 中危 2.9.1-6.el7_2.3 2.9.1-6.el7.5 libxml2: infinite loop in xmlStringLenDecodeEntities in some end-of-file situations

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7595

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-21 23:15 修改: 2025-12-03 16:15

libxml2-python CVE-2021-3516 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3516

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-06-01 14:15 修改: 2024-11-21 06:21

libxml2-python CVE-2021-3517 中危 2.9.1-6.el7_2.3 libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3517

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-19 14:15 修改: 2025-12-02 22:16

libxml2-python CVE-2021-3518 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3518

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-18 12:15 修改: 2024-11-21 06:21

libxml2-python CVE-2021-3537 中危 2.9.1-6.el7_2.3 libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3537

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-14 20:15 修改: 2024-11-21 06:21

libxml2-python CVE-2021-3541 中危 2.9.1-6.el7_2.3 libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3541

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-09 17:15 修改: 2024-11-21 06:21

libxml2-python CVE-2022-23308 中危 2.9.1-6.el7_2.3 libxml2: Use-after-free of ID and IDREF attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23308

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-26 05:15 修改: 2025-05-05 17:17

libxml2-python CVE-2022-29824 中危 2.9.1-6.el7_2.3 libxml2: integer overflows in xmlBuf and xmlBuffer lead to out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29824

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-05-03 03:15 修改: 2024-11-21 06:59

libxml2-python CVE-2022-40303 中危 2.9.1-6.el7_2.3 libxml2: integer overflows with XML_PARSE_HUGE

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40303

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-23 00:15 修改: 2025-04-29 05:15

libxml2-python CVE-2022-40304 中危 2.9.1-6.el7_2.3 libxml2: dict corruption caused by entity reference cycles

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40304

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-23 18:15 修改: 2025-04-28 20:15

libxml2-python CVE-2022-49043 中危 2.9.1-6.el7_2.3 libxml: use-after-free in xmlXIncludeAddNode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-49043

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-26 06:15 修改: 2025-11-03 21:15

libxml2-python CVE-2023-28484 中危 2.9.1-6.el7_2.3 libxml2: NULL dereference in xmlSchemaFixupComplexType

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28484

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-24 21:15 修改: 2025-05-30 20:15

libxml2-python CVE-2023-29469 中危 2.9.1-6.el7_2.3 libxml2: Hashing of empty dict strings isn't deterministic

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29469

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-24 21:15 修改: 2025-02-04 21:15

libxml2-python CVE-2023-39615 中危 2.9.1-6.el7_2.3 libxml2: crafted xml can cause global buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-29 17:15 修改: 2025-11-03 21:15

libxml2-python CVE-2024-25062 中危 2.9.1-6.el7_2.3 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-04 16:15 修改: 2025-11-03 22:16

libxml2-python CVE-2025-32414 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Out-of-Bounds Read in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32414

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-08 03:15 修改: 2025-11-03 20:18

libxml2-python CVE-2025-32415 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.13 libxml2: Out-of-bounds Read in xmlSchemaIDCFillNodeTables

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32415

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-17 17:15 修改: 2025-11-03 20:18

libxml2-python CVE-2025-6021 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.10 libxml2: Integer Overflow in xmlBuildQName() Leads to Stack Buffer Overflow in libxml2

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6021

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-12 13:15 修改: 2026-05-12 13:17

libxml2-python CVE-2025-9714 中危 2.9.1-6.el7_2.3 2.9.1-6.el7_9.14 libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9714

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-09-10 19:15 修改: 2026-05-12 13:17

libxml2-python CVE-2026-0990 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via uncontrolled recursion in XML catalog processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0990

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2-python CVE-2026-1757 中危 2.9.1-6.el7_2.3 libxml2: Memory Leak Leading to Local Denial of Service in xmllint Interactive Shell

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1757

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-02 13:15 修改: 2026-04-22 10:16

libxml2-python CVE-2026-6732 中危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XSD-validated document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6732

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-23 23:16 修改: 2026-05-15 14:36

lua CVE-2014-5461 中危 5.1.4-15.el7 lua: overflow flaw in vararg functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-5461

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-09-04 17:55 修改: 2026-05-06 22:30

lua CVE-2021-43519 中危 5.1.4-15.el7 lua: stack overflow in lua_resume of ldo.c allows a DoS via a crafted script file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43519

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-09 13:15 修改: 2024-11-21 06:29

lz4 CVE-2019-17543 中危 1.7.5-2.el7 lz4: heap-based buffer overflow in LZ4_write32

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17543

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-14 02:15 修改: 2024-11-21 04:32

lz4 CVE-2021-3520 中危 1.7.5-2.el7 lz4: memory corruption due to an integer overflow bug caused by memmove argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3520

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-06-02 13:15 修改: 2024-11-21 06:21

ncurses CVE-2017-10684 中危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses CVE-2017-10685 中危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses CVE-2018-19217 中危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference at function _nc_name_match

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses CVE-2019-17594 中危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses CVE-2019-17595 中危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses CVE-2023-29491 中危 5.9-14.20130511.el7_4 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-14 01:15 修改: 2025-11-04 19:15

ncurses-base CVE-2017-10684 中危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-10685 中危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-base CVE-2018-19217 中危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference at function _nc_name_match

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-base CVE-2019-17594 中危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-base CVE-2019-17595 中危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-base CVE-2023-29491 中危 5.9-14.20130511.el7_4 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-14 01:15 修改: 2025-11-04 19:15

ncurses-libs CVE-2017-10684 中危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow in fmt_entry function in dump_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10684

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-10685 中危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow caused by format string vulnerability in fmt_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10685

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-29 23:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2018-19217 中危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference at function _nc_name_match

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19217

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-libs CVE-2019-17594 中危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in the _nc_find_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17594

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-libs CVE-2019-17595 中危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in the fmt_entry function in tinfo/comp_hash.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17595

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-14 21:15 修改: 2024-11-21 04:32

ncurses-libs CVE-2023-29491 中危 5.9-14.20130511.el7_4 ncurses: Local users can trigger security-relevant memory corruption via malformed data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29491

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-14 01:15 修改: 2025-11-04 19:15

nspr CVE-2016-1951 中危 4.19.0-1.el7_5 nspr: Memory allocation issue related to PR_*printf functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1951

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-08-07 19:59 修改: 2026-05-06 22:30

nspr CVE-2018-0495 中危 4.19.0-1.el7_5 4.21.0-1.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nspr CVE-2018-12404 中危 4.19.0-1.el7_5 4.21.0-1.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nspr CVE-2019-11719 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nspr CVE-2019-11756 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nspr CVE-2019-17006 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nspr CVE-2019-17007 中危 4.19.0-1.el7_5 4.21.0-1.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nspr CVE-2020-12400 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nspr CVE-2020-12401 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nspr CVE-2020-12402 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nspr CVE-2020-12403 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nspr CVE-2020-6829 中危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

binutils CVE-2023-1579 中危 2.27-34.base.el7 binutils: Heap-buffer-overflow binutils-gdb/bfd/libbfd.c in bfd_getl64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1579

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-03 23:15 修改: 2025-02-13 15:15

binutils CVE-2025-11081 中危 2.27-34.base.el7 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11081

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-09-27 22:15 修改: 2026-04-29 01:00

binutils CVE-2025-11082 中危 2.27-34.base.el7 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11082

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-09-27 23:15 修改: 2026-05-12 13:16

nss CVE-2015-2808 中危 3.36.0-7.el7_5 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

nss CVE-2016-2183 中危 3.36.0-7.el7_5 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

nss CVE-2016-9074 中危 3.36.0-7.el7_5 nss: Insufficient timing side-channel resistance in divSpoiler

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9074

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-11 21:29 修改: 2025-11-25 17:50

nss CVE-2016-9574 中危 3.36.0-7.el7_5 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-07-19 13:29 修改: 2024-11-21 03:01

nss CVE-2018-0495 中危 3.36.0-7.el7_5 3.44.0-4.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss CVE-2018-12404 中危 3.36.0-7.el7_5 3.44.0-4.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss CVE-2018-18508 中危 3.36.0-7.el7_5 nss: NULL pointer dereference in several CMS functions resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 03:56

nss CVE-2019-11719 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss CVE-2019-11729 中危 3.36.0-7.el7_5 3.44.0-7.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss CVE-2019-11756 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss CVE-2019-17006 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss CVE-2019-17007 中危 3.36.0-7.el7_5 3.44.0-4.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss CVE-2020-12400 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss CVE-2020-12401 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss CVE-2020-12402 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss CVE-2020-12403 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss CVE-2020-25648 中危 3.36.0-7.el7_5 3.53.1-7.el7_9 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-20 22:15 修改: 2024-11-21 05:18

nss CVE-2020-6829 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

nss CVE-2023-5388 中危 3.36.0-7.el7_5 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-03-19 12:15 修改: 2025-11-04 19:16

nss CVE-2023-6135 中危 3.36.0-7.el7_5 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-12-19 14:15 修改: 2024-11-21 08:43

nss CVE-2024-6602 中危 3.36.0-7.el7_5 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-07-09 15:15 修改: 2025-11-03 23:17

binutils CVE-2025-11083 中危 2.27-34.base.el7 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11083

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-09-27 23:15 修改: 2026-05-12 13:16

nss-softokn CVE-2015-2613 中危 3.36.0-5.el7_5 JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2613

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-07-16 10:59 修改: 2026-05-06 22:30

nss-softokn CVE-2017-7781 中危 3.36.0-5.el7_5 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7781

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:32

nss-softokn CVE-2018-0495 中危 3.36.0-5.el7_5 3.44.0-5.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-softokn CVE-2018-12404 中危 3.36.0-5.el7_5 3.44.0-5.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-softokn CVE-2019-11719 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn CVE-2019-11729 中危 3.36.0-5.el7_5 3.44.0-8.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn CVE-2019-11756 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-softokn CVE-2019-17006 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn CVE-2019-17007 中危 3.36.0-5.el7_5 3.44.0-5.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn CVE-2020-12400 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-12401 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-12402 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-12403 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-softokn CVE-2020-6829 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

binutils CVE-2025-5245 中危 2.27-34.base.el7 binutils: GNU Binutils objdump debug.c debug_type_samep memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5245

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-27 15:15 修改: 2026-05-12 13:17

nss-softokn-freebl CVE-2015-2613 中危 3.36.0-5.el7_5 JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2613

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-07-16 10:59 修改: 2026-05-06 22:30

nss-softokn-freebl CVE-2017-7781 中危 3.36.0-5.el7_5 Mozilla: Elliptic curve point addition error when using mixed Jacobian-affine coordinates (MFSA 2017-18)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7781

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:32

nss-softokn-freebl CVE-2018-0495 中危 3.36.0-5.el7_5 3.44.0-5.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-softokn-freebl CVE-2018-12404 中危 3.36.0-5.el7_5 3.44.0-5.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-softokn-freebl CVE-2019-11719 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn-freebl CVE-2019-11729 中危 3.36.0-5.el7_5 3.44.0-8.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-softokn-freebl CVE-2019-11756 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-softokn-freebl CVE-2019-17006 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn-freebl CVE-2019-17007 中危 3.36.0-5.el7_5 3.44.0-5.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-softokn-freebl CVE-2020-12400 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-12401 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-12402 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-12403 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-softokn-freebl CVE-2020-6829 中危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

binutils CVE-2025-7545 中危 2.27-34.base.el7 binutils: Binutils: Heap Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7545

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-13 22:15 修改: 2026-05-12 13:17

binutils CVE-2025-7546 中危 2.27-34.base.el7 binutils: Binutils: Out-of-bounds Write Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7546

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-13 22:15 修改: 2026-05-12 13:17

binutils CVE-2026-4647 中危 2.27-34.base.el7 binutils: Out-of-Bounds Read in XCOFF Relocation Processing in GNU Binutils BFD Library

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4647

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-23 14:16 修改: 2026-03-24 19:02

nss-sysinit CVE-2015-2808 中危 3.36.0-7.el7_5 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

nss-sysinit CVE-2016-2183 中危 3.36.0-7.el7_5 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

nss-sysinit CVE-2016-9074 中危 3.36.0-7.el7_5 nss: Insufficient timing side-channel resistance in divSpoiler

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9074

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-11 21:29 修改: 2025-11-25 17:50

nss-sysinit CVE-2016-9574 中危 3.36.0-7.el7_5 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-07-19 13:29 修改: 2024-11-21 03:01

nss-sysinit CVE-2018-0495 中危 3.36.0-7.el7_5 3.44.0-4.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-sysinit CVE-2018-12404 中危 3.36.0-7.el7_5 3.44.0-4.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-sysinit CVE-2018-18508 中危 3.36.0-7.el7_5 nss: NULL pointer dereference in several CMS functions resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 03:56

nss-sysinit CVE-2019-11719 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-sysinit CVE-2019-11729 中危 3.36.0-7.el7_5 3.44.0-7.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-sysinit CVE-2019-11756 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-sysinit CVE-2019-17006 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-sysinit CVE-2019-17007 中危 3.36.0-7.el7_5 3.44.0-4.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-sysinit CVE-2020-12400 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-12401 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-12402 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-12403 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-sysinit CVE-2020-25648 中危 3.36.0-7.el7_5 3.53.1-7.el7_9 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-20 22:15 修改: 2024-11-21 05:18

nss-sysinit CVE-2020-6829 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

nss-sysinit CVE-2023-5388 中危 3.36.0-7.el7_5 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-03-19 12:15 修改: 2025-11-04 19:16

nss-sysinit CVE-2023-6135 中危 3.36.0-7.el7_5 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-12-19 14:15 修改: 2024-11-21 08:43

nss-sysinit CVE-2024-6602 中危 3.36.0-7.el7_5 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-07-09 15:15 修改: 2025-11-03 23:17

binutils CVE-2026-6844 中危 2.27-34.base.el7 binutils: Binutils: Denial of Service vulnerabilities in readelf via crafted ELF files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6844

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-22 09:16 修改: 2026-05-20 14:00

binutils CVE-2026-6845 中危 2.27-34.base.el7 binutils: Binutils: Denial of Service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6845

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-22 09:16 修改: 2026-05-20 13:58

bzip2 CVE-2019-12900 中危 1.0.6-13.el7 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2019-06-19 23:15 修改: 2025-06-09 16:15

nss-tools CVE-2015-2808 中危 3.36.0-7.el7_5 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

nss-tools CVE-2016-2183 中危 3.36.0-7.el7_5 SSL/TLS: Birthday attack against 64-bit block ciphers (SWEET32)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2183

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-01 00:59 修改: 2026-05-29 21:16

nss-tools CVE-2016-9074 中危 3.36.0-7.el7_5 nss: Insufficient timing side-channel resistance in divSpoiler

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9074

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-11 21:29 修改: 2025-11-25 17:50

nss-tools CVE-2016-9574 中危 3.36.0-7.el7_5 nss: Remote DoS during session handshake when using SessionTicket extention and ECDHE-ECDSA

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-07-19 13:29 修改: 2024-11-21 03:01

nss-tools CVE-2018-0495 中危 3.36.0-7.el7_5 3.44.0-4.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-tools CVE-2018-12404 中危 3.36.0-7.el7_5 3.44.0-4.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-tools CVE-2018-18508 中危 3.36.0-7.el7_5 nss: NULL pointer dereference in several CMS functions resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18508

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 03:56

nss-tools CVE-2019-11719 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-tools CVE-2019-11729 中危 3.36.0-7.el7_5 3.44.0-7.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-tools CVE-2019-11756 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-tools CVE-2019-17006 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-tools CVE-2019-17007 中危 3.36.0-7.el7_5 3.44.0-4.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-tools CVE-2020-12400 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-12401 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-12402 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-12403 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-tools CVE-2020-25648 中危 3.36.0-7.el7_5 3.53.1-7.el7_9 nss: TLS 1.3 CCS flood remote DoS Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25648

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-20 22:15 修改: 2024-11-21 05:18

nss-tools CVE-2020-6829 中危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

nss-tools CVE-2023-5388 中危 3.36.0-7.el7_5 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-03-19 12:15 修改: 2025-11-04 19:16

nss-tools CVE-2023-6135 中危 3.36.0-7.el7_5 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-12-19 14:15 修改: 2024-11-21 08:43

nss-tools CVE-2024-6602 中危 3.36.0-7.el7_5 Mozilla: Memory corruption in NSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6602

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-07-09 15:15 修改: 2025-11-03 23:17

bzip2-devel CVE-2019-12900 中危 1.0.6-13.el7 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2019-06-19 23:15 修改: 2025-06-09 16:15

nss-util CVE-2018-0495 中危 3.36.0-1.el7_5 3.44.0-3.el7 ROHNP: Key Extraction Side Channel in Multiple Crypto Libraries

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 23:29 修改: 2024-11-21 03:38

nss-util CVE-2018-12404 中危 3.36.0-1.el7_5 3.44.0-3.el7 nss: Cache side-channel variant of the Bleichenbacher attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12404

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-02 17:29 修改: 2024-11-21 03:45

nss-util CVE-2019-11719 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: Out-of-bounds read when importing curve25519 private key

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-util CVE-2019-11729 中危 3.36.0-1.el7_5 3.44.0-4.el7_7 nss: Empty or malformed p256-ECDH public keys may trigger a segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2025-11-25 17:50

nss-util CVE-2019-11756 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: Use-after-free in sftk_FreeSession due to improper refcounting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 20:15 修改: 2024-11-21 04:21

nss-util CVE-2019-17006 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: Check length of inputs for cryptographic primitives

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17006

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-util CVE-2019-17007 中危 3.36.0-1.el7_5 3.44.0-3.el7 nss: Handling of Netscape Certificate Sequences in CERT_DecodeCertPackage() may crash with a NULL deref leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 21:15 修改: 2024-11-21 04:31

nss-util CVE-2020-12400 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: P-384 and P-521 implementation uses a side-channel vulnerable modular inversion function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12400

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-util CVE-2020-12401 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: ECDSA timing attack mitigation bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12401

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-08 14:15 修改: 2024-11-21 04:59

nss-util CVE-2020-12402 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: Side channel vulnerabilities during RSA key generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-09 15:15 修改: 2024-11-21 04:59

nss-util CVE-2020-12403 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: CHACHA20-POLY1305 decryption with undersized tag leads to out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-27 19:15 修改: 2024-11-21 04:59

nss-util CVE-2020-6829 中危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: Side channel attack on ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-6829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-28 12:15 修改: 2024-11-21 05:36

openldap CVE-2019-13057 中危 2.4.44-20.el7 openldap: Information disclosure issue in slapd component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13057

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-26 13:15 修改: 2024-11-21 04:24

openldap CVE-2019-13565 中危 2.4.44-20.el7 openldap: ACL restrictions bypass due to sasl_ssf value being set permanently

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13565

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-26 13:15 修改: 2024-11-21 04:25

openldap CVE-2020-12243 中危 2.4.44-20.el7 2.4.44-22.el7 openldap: denial of service via nested boolean expressions in LDAP search filters

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12243

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-04-28 19:15 修改: 2024-11-21 04:59

openldap CVE-2020-25692 中危 2.4.44-20.el7 2.4.44-23.el7_9 openldap: NULL pointer dereference for unauthenticated packet in slapd

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25692

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-08 01:15 修改: 2024-11-21 05:18

openldap CVE-2020-25709 中危 2.4.44-20.el7 2.4.44-25.el7_9 openldap: assertion failure in Certificate List syntax validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25709

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-18 12:15 修改: 2024-11-21 05:18

openldap CVE-2020-25710 中危 2.4.44-20.el7 2.4.44-25.el7_9 openldap: assertion failure in CSN normalization with invalid input

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-25710

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-28 11:15 修改: 2024-11-21 05:18

openldap CVE-2020-36221 中危 2.4.44-20.el7 openldap: Integer underflow in serialNumberAndIssuerCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36221

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36222 中危 2.4.44-20.el7 openldap: Assertion failure in slapd in the saslAuthzTo validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36222

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36223 中危 2.4.44-20.el7 openldap: Out-of-bounds read in Values Return Filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36223

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36224 中危 2.4.44-20.el7 openldap: Invalid pointer free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36224

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36225 中危 2.4.44-20.el7 openldap: Double free in the saslAuthzTo processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36225

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36226 中危 2.4.44-20.el7 openldap: Denial of service via length miscalculation in slap_parse_user

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36226

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36227 中危 2.4.44-20.el7 openldap: Infinite loop in slapd with the cancel_extop Cancel operation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36227

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36228 中危 2.4.44-20.el7 openldap: Integer underflow in issuerAndThisUpdateCheck in schema_init.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36228

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36229 中危 2.4.44-20.el7 openldap: Type confusion in ad_keystring in ad.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36229

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2020-36230 中危 2.4.44-20.el7 openldap: Assertion failure in ber_next_element in decode.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36230

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-26 18:15 修改: 2024-11-21 05:29

openldap CVE-2021-27212 中危 2.4.44-20.el7 openldap: Assertion failure in slapd in the issuerAndThisUpdateCheck function

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27212

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-14 03:15 修改: 2024-11-21 05:57

openldap CVE-2022-29155 中危 2.4.44-20.el7 openldap: OpenLDAP SQL injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29155

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-05-04 20:15 修改: 2024-11-21 06:58

openldap CVE-2026-22185 中危 2.4.44-20.el7 OpenLDAP: OpenLDAP LMDB: Denial of Service and Information Disclosure via Heap Buffer Underflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22185

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-07 21:16 修改: 2026-04-15 00:35

bzip2-libs CVE-2019-12900 中危 1.0.6-13.el7 bzip2: bzip2: Data integrity error when decompressing (with data integrity tests fail).

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12900

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-19 23:15 修改: 2025-06-09 16:15

coreutils CVE-2016-2781 中危 8.22-23.el7 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

coreutils CVE-2017-18018 中危 8.22-23.el7 coreutils: race condition vulnerability in chown and chgrp

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-01-04 04:29 修改: 2025-06-09 16:15

openssl-libs CVE-2015-2808 中危 1:1.0.2k-16.el7 SSL/TLS: "Invariance Weakness" vulnerability in RC4 stream cipher

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2808

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-04-01 02:00 修改: 2026-05-28 14:16

openssl-libs CVE-2018-5407 中危 1:1.0.2k-16.el7 1:1.0.2k-16.el7_6.1 openssl: Side-channel vulnerability on SMT/Hyper-Threading architectures (PortSmash)

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5407

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-11-15 21:29 修改: 2024-11-21 04:08

openssl-libs CVE-2019-1547 中危 1:1.0.2k-16.el7 openssl: side-channel weak encryption vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1547

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-10 17:15 修改: 2024-11-21 04:36

openssl-libs CVE-2019-1559 中危 1:1.0.2k-16.el7 1:1.0.2k-19.el7 openssl: 0-byte record padding oracle

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1559

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-27 23:29 修改: 2024-11-21 04:36

openssl-libs CVE-2021-23840 中危 1:1.0.2k-16.el7 1:1.0.2k-22.el7_9 openssl: integer overflow in CipherUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23840

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-16 17:15 修改: 2026-04-16 15:16

openssl-libs CVE-2021-23841 中危 1:1.0.2k-16.el7 1:1.0.2k-22.el7_9 openssl: NULL pointer dereference in X509_issuer_and_serial_hash()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23841

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-16 17:15 修改: 2024-11-21 05:51

openssl-libs CVE-2021-3712 中危 1:1.0.2k-16.el7 1:1.0.2k-23.el7_9 openssl: Read buffer overruns processing ASN.1 strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3712

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-08-24 15:15 修改: 2026-04-16 15:16

openssl-libs CVE-2022-1292 中危 1:1.0.2k-16.el7 openssl: c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-05-03 16:15 修改: 2025-08-13 14:15

openssl-libs CVE-2022-2068 中危 1:1.0.2k-16.el7 openssl: the c_rehash script allows command injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-21 15:15 修改: 2025-11-03 22:15

openssl-libs CVE-2022-4304 中危 1:1.0.2k-16.el7 openssl: timing attack in RSA Decryption implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-08 20:15 修改: 2025-11-04 20:16

openssl-libs CVE-2023-0215 中危 1:1.0.2k-16.el7 openssl: use-after-free following BIO_new_NDEF

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-08 20:15 修改: 2025-11-04 20:16

openssl-libs CVE-2023-0466 中危 1:1.0.2k-16.el7 openssl: Certificate policy check not enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-28 15:15 修改: 2025-02-19 18:15

openssl-libs CVE-2023-2650 中危 1:1.0.2k-16.el7 openssl: Possible DoS translating ASN.1 object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-05-30 14:15 修改: 2025-03-19 16:15

openssl-libs CVE-2024-6119 中危 1:1.0.2k-16.el7 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-09-03 16:15 修改: 2026-05-12 12:17

openssl-libs CVE-2025-9230 中危 1:1.0.2k-16.el7 1:1.0.2k-26.el7_9.1 openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-09-30 14:15 修改: 2026-06-02 14:16

openssl-libs CVE-2026-28390 中危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

p11-kit CVE-2020-29361 中危 0.23.5-3.el7 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

p11-kit CVE-2020-29362 中危 0.23.5-3.el7 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

p11-kit-trust CVE-2020-29361 中危 0.23.5-3.el7 p11-kit: integer overflow when allocating memory for arrays or attributes and object identifiers

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29361

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

p11-kit-trust CVE-2020-29362 中危 0.23.5-3.el7 p11-kit: out-of-bounds read in p11_rpc_buffer_get_byte_array function in rpc-message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-29362

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-16 14:15 修改: 2024-11-21 05:23

coreutils CVE-2025-5278 中危 8.22-23.el7 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-27 21:15 修改: 2026-05-19 17:16

cpio CVE-2019-14866 中危 2.11-27.el7 2.11-28.el7 cpio: improper input validation when writing tar header fields leads to unexpected tar generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14866

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-07 17:15 修改: 2024-11-21 04:27

pam CVE-2024-10041 中危 1.1.8-22.el7 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15

pam CVE-2024-22365 中危 1.1.8-22.el7 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-06 08:15 修改: 2026-05-12 12:16

pcre CVE-2017-6004 中危 8.32-17.el7 pcre: Out-of-bounds read in compile_bracket_matchingpath function (8.41/3)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6004

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-16 11:59 修改: 2026-05-13 00:24

pcre CVE-2017-7186 中危 8.32-17.el7 pcre: Invalid Unicode property lookup (8.41/7, 10.24/2)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7186

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-20 00:59 修改: 2026-05-13 00:24

procps-ng CVE-2018-1122 中危 3.3.10-23.el7 3.3.10-26.el7 procps: Local privilege escalation in top

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1122

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-05-23 14:29 修改: 2024-11-21 03:59

cpio CVE-2021-38185 中危 2.11-27.el7 cpio: integer overflow in ds_fgetstr() in dstring.c can lead to an out-of-bounds write via a crafted pattern file

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-38185

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-08-08 00:15 修改: 2025-06-09 15:15

cpio CVE-2023-7207 中危 2.11-27.el7 cpio: path traversal vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7207

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-29 01:42 修改: 2025-08-26 17:19

curl CVE-2015-3153 中危 7.29.0-59.el7_9.1 curl: sensitive HTTP server headers also sent to proxies

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3153

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2015-05-01 15:59 修改: 2026-05-06 22:30

curl CVE-2016-8615 中危 7.29.0-59.el7_9.1 curl: Cookie injection for other servers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8615

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2016-8617 中危 7.29.0-59.el7_9.1 curl: Out-of-bounds write via unchecked multiplication

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8617

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

curl CVE-2016-8618 中危 7.29.0-59.el7_9.1 curl: Double-free in curl_maprintf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8618

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

curl CVE-2016-8619 中危 7.29.0-59.el7_9.1 curl: Double-free in krb5 code

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8619

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

python CVE-2007-4559 中危 2.7.5-76.el7 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

python CVE-2013-1664 中危 2.7.5-76.el7 bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1664

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python CVE-2013-1665 中危 2.7.5-76.el7 bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1665

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python CVE-2013-7040 中危 2.7.5-76.el7 python: hash secret can be recovered remotely

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7040

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-05-19 14:55 修改: 2026-05-06 22:30

python CVE-2017-1000158 中危 2.7.5-76.el7 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000158

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-17 05:29 修改: 2025-04-20 01:37

python CVE-2018-14647 中危 2.7.5-76.el7 2.7.5-86.el7 python: Missing salt initialization in _elementtree.c module

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14647

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-25 00:29 修改: 2024-11-21 03:49

python CVE-2018-20852 中危 2.7.5-76.el7 2.7.5-88.el7 python: Cookie domain check returns incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20852

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-13 21:15 修改: 2024-11-21 04:02

python CVE-2019-16056 中危 2.7.5-76.el7 2.7.5-88.el7 python: email.utils.parseaddr wrongly parses email addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16056

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-06 18:15 修改: 2024-11-21 04:29

python CVE-2019-16935 中危 2.7.5-76.el7 2.7.5-89.el7 python: XSS vulnerability in the documentation XML-RPC server in server_title field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16935

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-28 02:15 修改: 2024-11-21 04:31

python CVE-2019-18348 中危 2.7.5-76.el7 python: CRLF injection via the host part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18348

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-23 17:15 修改: 2024-11-21 04:33

python CVE-2019-20907 中危 2.7.5-76.el7 2.7.5-90.el7 python: infinite loop in the tarfile module via crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20907

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-13 13:15 修改: 2024-11-21 04:39

python CVE-2019-5010 中危 2.7.5-76.el7 2.7.5-86.el7 python: NULL pointer dereference using a specially crafted X509 certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5010

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-31 21:15 修改: 2024-11-21 04:44

python CVE-2019-9740 中危 2.7.5-76.el7 2.7.5-86.el7 python: CRLF injection via the query part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9740

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-13 03:29 修改: 2024-11-21 04:52

python CVE-2019-9947 中危 2.7.5-76.el7 2.7.5-86.el7 python: CRLF injection via the path part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9947

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python CVE-2019-9948 中危 2.7.5-76.el7 2.7.5-86.el7 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9948

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python CVE-2020-10735 中危 2.7.5-76.el7 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-09 14:15 修改: 2025-11-03 22:15

python CVE-2020-26116 中危 2.7.5-76.el7 2.7.5-92.el7_9 python: CRLF injection via HTTP request method in httplib/http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26116

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-27 04:15 修改: 2024-11-21 05:19

python CVE-2020-26137 中危 2.7.5-76.el7 2.7.5-92.el7_9 python-urllib3: CRLF injection via HTTP request method

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26137

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-30 18:15 修改: 2024-11-21 05:19

python CVE-2020-27619 中危 2.7.5-76.el7 python: Unsafe use of eval() on data retrieved via HTTP in the test suite

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 03:16 修改: 2024-11-21 05:21

python CVE-2020-8492 中危 2.7.5-76.el7 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8492

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-30 19:15 修改: 2024-11-21 05:38

python CVE-2021-23336 中危 2.7.5-76.el7 python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23336

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-15 13:15 修改: 2025-12-17 22:15

python CVE-2021-3177 中危 2.7.5-76.el7 2.7.5-92.el7_9 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-19 06:15 修改: 2025-12-18 15:15

python CVE-2021-3733 中危 2.7.5-76.el7 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-10 17:42 修改: 2025-11-03 22:15

python CVE-2021-4189 中危 2.7.5-76.el7 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-24 16:15 修改: 2025-12-17 22:15

python CVE-2022-0391 中危 2.7.5-76.el7 python: urllib.parse does not sanitize URLs containing ASCII newline and tabs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-09 23:15 修改: 2025-12-17 21:15

python CVE-2022-45061 中危 2.7.5-76.el7 python: CPU denial of service via inefficient IDNA decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-09 07:15 修改: 2025-11-03 22:16

python CVE-2022-48560 中危 2.7.5-76.el7 python: use after free in heappushpop() of heapq module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48560

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python CVE-2022-48565 中危 2.7.5-76.el7 python: XML External Entity in XML processing plistlib module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48565

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python CVE-2022-48566 中危 2.7.5-76.el7 python: constant-time-defeating optimisations issue in the compare_digest function in Lib/hmac.p

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48566

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python CVE-2023-27043 中危 2.7.5-76.el7 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-19 00:15 修改: 2026-05-12 11:16

python CVE-2024-0450 中危 2.7.5-76.el7 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-03-19 16:15 修改: 2026-04-15 00:35

python CVE-2024-6232 中危 2.7.5-76.el7 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-09-03 13:15 修改: 2025-11-03 23:17

python CVE-2024-6923 中危 2.7.5-76.el7 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-01 14:15 修改: 2026-04-15 00:35

python CVE-2024-8088 中危 2.7.5-76.el7 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-22 19:15 修改: 2026-04-15 00:35

python CVE-2024-9287 中危 2.7.5-76.el7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-10-22 17:15 修改: 2025-11-03 23:17

python CVE-2025-0938 中危 2.7.5-76.el7 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-31 18:15 修改: 2026-04-15 00:35

python CVE-2025-11468 中危 2.7.5-76.el7 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-12084 中危 2.7.5-76.el7 2.7.5-94.el7_9.2 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-03 19:15 修改: 2026-01-26 15:16

python CVE-2025-12781 中危 2.7.5-76.el7 cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-21 20:16 修改: 2026-02-02 17:25

python CVE-2025-13837 中危 2.7.5-76.el7 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-01 18:16 修改: 2026-03-03 15:16

python CVE-2025-15282 中危 2.7.5-76.el7 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-15366 中危 2.7.5-76.el7 2.7.5-94.el7_9.3 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-15367 中危 2.7.5-76.el7 2.7.5-94.el7_9.3 cpython: POP3 command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2025-4516 中危 2.7.5-76.el7 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-15 14:15 修改: 2026-04-15 00:35

python CVE-2025-6069 中危 2.7.5-76.el7 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-17 14:15 修改: 2026-04-15 00:35

python CVE-2025-8291 中危 2.7.5-76.el7 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-07 18:16 修改: 2026-04-15 00:35

python CVE-2026-0672 中危 2.7.5-76.el7 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2026-0865 中危 2.7.5-76.el7 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python CVE-2026-1502 中危 2.7.5-76.el7 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-10 18:16 修改: 2026-06-04 15:16

python CVE-2026-3276 中危 2.7.5-76.el7 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-06-03 16:16 修改: 2026-06-04 18:16

python CVE-2026-3644 中危 2.7.5-76.el7 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:30

python CVE-2026-4224 中危 2.7.5-76.el7 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:33

python CVE-2026-42308 中危 2.7.5-76.el7 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-09 06:16 修改: 2026-05-12 17:57

python CVE-2026-5713 中危 2.7.5-76.el7 python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-14 16:16 修改: 2026-04-17 15:11

python CVE-2026-6019 中危 2.7.5-76.el7 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-22 20:16 修改: 2026-05-28 19:15

python CVE-2026-7210 中危 2.7.5-76.el7 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-11 18:16 修改: 2026-06-01 14:32

curl CVE-2016-8624 中危 7.29.0-59.el7_9.1 curl: Invalid URL parsing with '#'

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8624

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

curl CVE-2016-8625 中危 7.29.0-59.el7_9.1 curl: IDNA 2003 makes curl use wrong host

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8625

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2017-1000254 中危 7.29.0-59.el7_9.1 curl: FTP PWD response parser out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000254

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-10-06 13:29 修改: 2026-05-13 00:24

curl CVE-2017-8817 中危 7.29.0-59.el7_9.1 curl: FTP wildcard out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8817

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-11-29 18:29 修改: 2026-04-15 21:16

curl CVE-2020-8284 中危 7.29.0-59.el7_9.1 curl: FTP PASV command response can cause curl to connect to arbitrary host

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8284

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

curl CVE-2020-8285 中危 7.29.0-59.el7_9.1 curl: Malicious FTP server can trigger stack overflow when CURLOPT_CHUNK_BGN_FUNCTION is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8285

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2020-12-14 20:15 修改: 2026-04-16 15:16

curl CVE-2021-22876 中危 7.29.0-59.el7_9.1 curl: Leak of authentication credentials in URL via automatic Referer

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22876

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-04-01 18:15 修改: 2025-06-09 15:15

python-libs CVE-2007-4559 中危 2.7.5-76.el7 python: tarfile module directory traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-4559

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2007-08-28 01:17 修改: 2026-04-23 00:35

python-libs CVE-2013-1664 中危 2.7.5-76.el7 bindings: Internal entity expansion in Python XML libraries inflicts DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1664

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python-libs CVE-2013-1665 中危 2.7.5-76.el7 bindings: External entity expansion in Python XML libraries inflicts potential security flaws and DoS vulnerabilities

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-1665

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2013-04-03 00:55 修改: 2026-04-29 01:13

python-libs CVE-2013-7040 中危 2.7.5-76.el7 python: hash secret can be recovered remotely

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7040

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-05-19 14:55 修改: 2026-05-06 22:30

python-libs CVE-2017-1000158 中危 2.7.5-76.el7 python: Integer overflow in PyString_DecodeEscape results in heap-base buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000158

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-17 05:29 修改: 2025-04-20 01:37

python-libs CVE-2018-14647 中危 2.7.5-76.el7 2.7.5-86.el7 python: Missing salt initialization in _elementtree.c module

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14647

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-25 00:29 修改: 2024-11-21 03:49

python-libs CVE-2018-20852 中危 2.7.5-76.el7 2.7.5-88.el7 python: Cookie domain check returns incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20852

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-13 21:15 修改: 2024-11-21 04:02

python-libs CVE-2019-16056 中危 2.7.5-76.el7 2.7.5-88.el7 python: email.utils.parseaddr wrongly parses email addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16056

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-06 18:15 修改: 2024-11-21 04:29

python-libs CVE-2019-16935 中危 2.7.5-76.el7 2.7.5-89.el7 python: XSS vulnerability in the documentation XML-RPC server in server_title field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16935

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-28 02:15 修改: 2024-11-21 04:31

python-libs CVE-2019-18348 中危 2.7.5-76.el7 python: CRLF injection via the host part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18348

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-23 17:15 修改: 2024-11-21 04:33

python-libs CVE-2019-20907 中危 2.7.5-76.el7 2.7.5-90.el7 python: infinite loop in the tarfile module via crafted TAR archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20907

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-13 13:15 修改: 2024-11-21 04:39

python-libs CVE-2019-5010 中危 2.7.5-76.el7 2.7.5-86.el7 python: NULL pointer dereference using a specially crafted X509 certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5010

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-31 21:15 修改: 2024-11-21 04:44

python-libs CVE-2019-9740 中危 2.7.5-76.el7 2.7.5-86.el7 python: CRLF injection via the query part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9740

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-13 03:29 修改: 2024-11-21 04:52

python-libs CVE-2019-9947 中危 2.7.5-76.el7 2.7.5-86.el7 python: CRLF injection via the path part of the url passed to urlopen()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9947

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python-libs CVE-2019-9948 中危 2.7.5-76.el7 2.7.5-86.el7 python: Undocumented local_file protocol allows remote attackers to bypass protection mechanisms

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9948

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-23 18:29 修改: 2024-11-21 04:52

python-libs CVE-2020-10735 中危 2.7.5-76.el7 python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-09 14:15 修改: 2025-11-03 22:15

python-libs CVE-2020-26116 中危 2.7.5-76.el7 2.7.5-92.el7_9 python: CRLF injection via HTTP request method in httplib/http.client

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26116

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-27 04:15 修改: 2024-11-21 05:19

python-libs CVE-2020-26137 中危 2.7.5-76.el7 2.7.5-92.el7_9 python-urllib3: CRLF injection via HTTP request method

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26137

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-30 18:15 修改: 2024-11-21 05:19

python-libs CVE-2020-27619 中危 2.7.5-76.el7 python: Unsafe use of eval() on data retrieved via HTTP in the test suite

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-10-22 03:16 修改: 2024-11-21 05:21

python-libs CVE-2020-8492 中危 2.7.5-76.el7 python: wrong backtracking in urllib.request.AbstractBasicAuthHandler allows for a ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8492

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-30 19:15 修改: 2024-11-21 05:38

python-libs CVE-2021-23336 中危 2.7.5-76.el7 python: Web cache poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a semicolon in query parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23336

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-15 13:15 修改: 2025-12-17 22:15

python-libs CVE-2021-3177 中危 2.7.5-76.el7 2.7.5-92.el7_9 python: Stack-based buffer overflow in PyCArg_repr in _ctypes/callproc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3177

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-19 06:15 修改: 2025-12-18 15:15

python-libs CVE-2021-3733 中危 2.7.5-76.el7 python: urllib: Regular expression DoS in AbstractBasicAuthHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-10 17:42 修改: 2025-11-03 22:15

python-libs CVE-2021-4189 中危 2.7.5-76.el7 python: ftplib should not use the host from the PASV response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-24 16:15 修改: 2025-12-17 22:15

python-libs CVE-2022-0391 中危 2.7.5-76.el7 python: urllib.parse does not sanitize URLs containing ASCII newline and tabs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-09 23:15 修改: 2025-12-17 21:15

python-libs CVE-2022-45061 中危 2.7.5-76.el7 python: CPU denial of service via inefficient IDNA decoder

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-09 07:15 修改: 2025-11-03 22:16

python-libs CVE-2022-48560 中危 2.7.5-76.el7 python: use after free in heappushpop() of heapq module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48560

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python-libs CVE-2022-48565 中危 2.7.5-76.el7 python: XML External Entity in XML processing plistlib module

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48565

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python-libs CVE-2022-48566 中危 2.7.5-76.el7 python: constant-time-defeating optimisations issue in the compare_digest function in Lib/hmac.p

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48566

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

python-libs CVE-2023-27043 中危 2.7.5-76.el7 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-19 00:15 修改: 2026-05-12 11:16

python-libs CVE-2024-0450 中危 2.7.5-76.el7 python: The zipfile module is vulnerable to zip-bombs leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-03-19 16:15 修改: 2026-04-15 00:35

python-libs CVE-2024-6232 中危 2.7.5-76.el7 python: cpython: tarfile: ReDos via excessive backtracking while parsing header values

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-09-03 13:15 修改: 2025-11-03 23:17

python-libs CVE-2024-6923 中危 2.7.5-76.el7 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-01 14:15 修改: 2026-04-15 00:35

python-libs CVE-2024-8088 中危 2.7.5-76.el7 python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-22 19:15 修改: 2026-04-15 00:35

python-libs CVE-2024-9287 中危 2.7.5-76.el7 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-10-22 17:15 修改: 2025-11-03 23:17

python-libs CVE-2025-0938 中危 2.7.5-76.el7 python: cpython: URL parser allowed square brackets in domain names

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-31 18:15 修改: 2026-04-15 00:35

python-libs CVE-2025-11468 中危 2.7.5-76.el7 cpython: Missing character filtering in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11468

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-12084 中危 2.7.5-76.el7 2.7.5-94.el7_9.2 cpython: python: cpython: Quadratic algorithm in xml.dom.minidom leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12084

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-03 19:15 修改: 2026-01-26 15:16

python-libs CVE-2025-12781 中危 2.7.5-76.el7 cpython: base64.b64decode() always accepts "+/" characters, despite setting altchars

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-12781

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-21 20:16 修改: 2026-02-02 17:25

python-libs CVE-2025-13837 中危 2.7.5-76.el7 cpython: Out-of-memory when loading Plist

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13837

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-01 18:16 修改: 2026-03-03 15:16

python-libs CVE-2025-15282 中危 2.7.5-76.el7 cpython: Header injection via newlines in data URL mediatype in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15282

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-15366 中危 2.7.5-76.el7 2.7.5-94.el7_9.3 cpython: IMAP command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15366

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-15367 中危 2.7.5-76.el7 2.7.5-94.el7_9.3 cpython: POP3 command injection in user-controlled commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15367

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2025-4516 中危 2.7.5-76.el7 cpython: python: CPython DecodeError Handling Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4516

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-15 14:15 修改: 2026-04-15 00:35

python-libs CVE-2025-6069 中危 2.7.5-76.el7 cpython: Python HTMLParser quadratic complexity

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6069

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-17 14:15 修改: 2026-04-15 00:35

python-libs CVE-2025-8291 中危 2.7.5-76.el7 cpython: python: Python zipfile End of Central Directory (EOCD) Locator record offset not checked

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8291

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-07 18:16 修改: 2026-04-15 00:35

python-libs CVE-2026-0672 中危 2.7.5-76.el7 cpython: Header injection in http.cookies.Morsel in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0672

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2026-0865 中危 2.7.5-76.el7 cpython: wsgiref.headers.Headers allows header newline injection in Python

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0865

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 22:15 修改: 2026-04-15 00:35

python-libs CVE-2026-1502 中危 2.7.5-76.el7 python: Python: HTTP header injection via CR/LF in proxy tunnel headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1502

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-10 18:16 修改: 2026-06-04 15:16

python-libs CVE-2026-3276 中危 2.7.5-76.el7 python: Python unicodedata: Denial of Service due to excessive CPU consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3276

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-06-03 16:16 修改: 2026-06-04 18:16

python-libs CVE-2026-3644 中危 2.7.5-76.el7 cpython: Incomplete control character validation in http.cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3644

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:30

python-libs CVE-2026-4224 中危 2.7.5-76.el7 cpython: Stack overflow parsing XML with deeply nested DTD content models

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4224

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-16 18:16 修改: 2026-06-04 19:33

python-libs CVE-2026-42308 中危 2.7.5-76.el7 Pillow: python: Pillow: Denial of Service via integer overflow in font processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42308

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-09 06:16 修改: 2026-05-12 17:57

python-libs CVE-2026-5713 中危 2.7.5-76.el7 python: Python: Information disclosure and arbitrary code execution via remote debugging with a malicious process.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5713

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-14 16:16 修改: 2026-04-17 15:11

python-libs CVE-2026-6019 中危 2.7.5-76.el7 python: Python: Cross-Site Scripting (XSS) vulnerability in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6019

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-22 20:16 修改: 2026-05-28 19:15

python-libs CVE-2026-7210 中危 2.7.5-76.el7 python: expat: Python/Expat: Denial of Service via crafted XML document

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7210

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-11 18:16 修改: 2026-06-01 14:32

rpm CVE-2017-7500 中危 4.11.3-35.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm CVE-2017-7501 中危 4.11.3-35.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm CVE-2021-20271 中危 4.11.3-35.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm CVE-2021-3421 中危 4.11.3-35.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm CVE-2021-3521 中危 4.11.3-35.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm CVE-2021-35937 中危 4.11.3-35.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm CVE-2021-35938 中危 4.11.3-35.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm CVE-2021-35939 中危 4.11.3-35.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm CVE-2026-44604 中危 4.11.3-35.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

rpm-build-libs CVE-2017-7500 中危 4.11.3-35.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm-build-libs CVE-2017-7501 中危 4.11.3-35.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm-build-libs CVE-2021-20271 中危 4.11.3-35.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm-build-libs CVE-2021-3421 中危 4.11.3-35.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm-build-libs CVE-2021-3521 中危 4.11.3-35.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm-build-libs CVE-2021-35937 中危 4.11.3-35.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-build-libs CVE-2021-35938 中危 4.11.3-35.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-build-libs CVE-2021-35939 中危 4.11.3-35.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm-build-libs CVE-2026-44604 中危 4.11.3-35.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

rpm-libs CVE-2017-7500 中危 4.11.3-35.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm-libs CVE-2017-7501 中危 4.11.3-35.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm-libs CVE-2021-20271 中危 4.11.3-35.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm-libs CVE-2021-3421 中危 4.11.3-35.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm-libs CVE-2021-3521 中危 4.11.3-35.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm-libs CVE-2021-35937 中危 4.11.3-35.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-libs CVE-2021-35938 中危 4.11.3-35.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-libs CVE-2021-35939 中危 4.11.3-35.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm-libs CVE-2026-44604 中危 4.11.3-35.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

rpm-python CVE-2017-7500 中危 4.11.3-35.el7 rpm: Following symlinks to directories when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7500

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-13 17:29 修改: 2024-11-21 03:32

rpm-python CVE-2017-7501 中危 4.11.3-35.el7 rpm: Following symlinks to files when installing packages allows privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7501

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

rpm-python CVE-2021-20271 中危 4.11.3-35.el7 4.11.3-48.el7_9 rpm: Signature checks bypass via corrupted rpm package

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20271

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-26 17:15 修改: 2024-11-21 05:46

rpm-python CVE-2021-3421 中危 4.11.3-35.el7 rpm: unsigned signature header leads to string injection into an rpm database

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3421

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-19 14:15 修改: 2024-11-21 06:21

rpm-python CVE-2021-3521 中危 4.11.3-35.el7 rpm: RPM does not require subkeys to have a valid binding signature

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3521

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-22 15:15 修改: 2024-11-21 06:21

rpm-python CVE-2021-35937 中危 4.11.3-35.el7 rpm: TOCTOU race in checks for unsafe symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35937

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-python CVE-2021-35938 中危 4.11.3-35.el7 rpm: races with chown/chmod/capabilities calls during installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 06:12

rpm-python CVE-2021-35939 中危 4.11.3-35.el7 rpm: checks for unsafe symlinks are not performed for intermediary directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-35939

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-26 16:15 修改: 2024-11-21 06:12

rpm-python CVE-2026-44604 中危 4.11.3-35.el7 rpm: Command injection in rpmuncompress doUntar() via unescaped archive top-level directory name in popen() shell command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44604

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-28 08:16 修改: 2026-05-28 13:44

sed CVE-2026-5958 中危 4.2.2-5.el7 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-20 12:16 修改: 2026-05-19 15:17

shared-mime-info CVE-2019-3820 中危 1.8-4.el7 1.8-5.el7 gnome-shell: partial lock screen bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3820

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-06 20:29 修改: 2024-11-21 04:42

curl CVE-2021-22924 中危 7.29.0-59.el7_9.1 curl: Bad connection reuse due to flawed path name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22924

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-08-05 21:15 修改: 2025-06-09 15:15

curl CVE-2021-22946 中危 7.29.0-59.el7_9.1 curl: Requirement to use TLS not properly enforced for IMAP, POP3, and FTP protocols

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22946

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

sqlite CVE-2015-7036 中危 3.7.17-8.el7 sqlite: arbitrary code execution on databases with malformed schema

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-7036

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-22 03:59 修改: 2026-05-06 22:30

sqlite CVE-2017-7000 中危 3.7.17-8.el7 chromium-browser: pointer disclosure in sqlite

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7000

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-04-03 06:29 修改: 2024-11-21 03:30

sqlite CVE-2019-13751 中危 3.7.17-8.el7 sqlite: fts3: improve detection of corrupted records

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13751

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2019-13752 中危 3.7.17-8.el7 sqlite: fts3: improve shadow table corruption detection

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13752

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2019-13753 中危 3.7.17-8.el7 sqlite: fts3: incorrectly removed corruption check

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13753

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-10 22:15 修改: 2024-11-21 04:25

sqlite CVE-2019-19603 中危 3.7.17-8.el7 sqlite: mishandling of certain SELECT statements with non-existent VIEW can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19603

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-09 19:15 修改: 2024-11-21 04:35

sqlite CVE-2019-19645 中危 3.7.17-8.el7 sqlite: infinite recursion via certain types of self-referential views in conjunction with ALTER TABLE statements

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19645

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-09 16:15 修改: 2024-11-21 04:35

sqlite CVE-2019-19880 中危 3.7.17-8.el7 sqlite: invalid pointer dereference in exprListAppendList in window.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19880

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-18 06:15 修改: 2024-11-21 04:35

sqlite CVE-2019-19924 中危 3.7.17-8.el7 sqlite: incorrect sqlite3WindowRewrite() error handling leads to mishandling certain parser-tree rewriting

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19924

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-24 16:15 修改: 2024-11-21 04:35

sqlite CVE-2019-20218 中危 3.7.17-8.el7 sqlite: selectExpander in select.c proceeds with WITH stack unwinding even after a parsing error

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-02 14:16 修改: 2024-11-21 04:38

sqlite CVE-2019-5827 中危 3.7.17-8.el7 sqlite: out-of-bounds access due to the use of 32-bit memory allocator interfaces

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-5827

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-27 17:15 修改: 2024-11-21 04:45

sqlite CVE-2019-8457 中危 3.7.17-8.el7 sqlite: heap out-of-bound read in function rtreenode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-05-30 16:29 修改: 2024-11-21 04:49

sqlite CVE-2020-13435 中危 3.7.17-8.el7 sqlite: NULL pointer dereference in sqlite3ExprCodeTarget()

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13435

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-05-24 22:15 修改: 2024-11-21 05:01

sqlite CVE-2020-13631 中危 3.7.17-8.el7 sqlite: Virtual table can be renamed into the name of one of its shadow tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13631

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-05-27 15:15 修改: 2024-11-21 05:01

sqlite CVE-2020-24736 中危 3.7.17-8.el7 sqlite: Crash due to misuse of window functions.

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24736

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-04-11 18:15 修改: 2025-02-11 18:15

sqlite CVE-2020-35527 中危 3.7.17-8.el7 sqlite: Out of bounds access during table rename

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35527

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-01 18:15 修改: 2024-11-21 05:27

sqlite CVE-2022-35737 中危 3.7.17-8.el7 sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-03 06:15 修改: 2026-02-13 20:16

sqlite CVE-2025-29087 中危 3.7.17-8.el7 sqlite: Integer Overflow in SQLite concat_ws Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29087

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-07 20:15 修改: 2025-04-30 12:43

sqlite CVE-2025-29088 中危 3.7.17-8.el7 sqlite: Denial of Service in SQLite

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29088

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-10 14:15 修改: 2025-09-30 16:59

curl CVE-2021-22947 中危 7.29.0-59.el7_9.1 curl: Server responses received before STARTTLS processed after TLS handshake

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22947

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-09-29 20:15 修改: 2026-04-16 15:16

curl CVE-2022-27774 中危 7.29.0-59.el7_9.1 curl: credential leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27774

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

curl CVE-2022-27776 中危 7.29.0-59.el7_9.1 curl: auth/cookie leak on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27776

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

curl CVE-2022-27778 中危 7.29.0-59.el7_9.1 curl: removes wrong file on error

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27778

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

curl CVE-2022-27779 中危 7.29.0-59.el7_9.1 curl: cookie for trailing dot TLD

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27779

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

systemd CVE-2013-4392 中危 219-62.el7 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13

systemd CVE-2017-18078 中危 219-62.el7 systemd: Unsafe handling of hard links allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-01-29 05:29 修改: 2024-11-21 03:19

systemd CVE-2018-15686 中危 219-62.el7 219-67.el7 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd CVE-2018-16866 中危 219-62.el7 219-67.el7 systemd: out-of-bounds read when parsing a crafted syslog message

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16866

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-11 19:29 修改: 2024-11-21 03:53

systemd CVE-2018-6954 中危 219-62.el7 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-13 20:29 修改: 2025-06-09 16:15

systemd CVE-2019-3842 中危 219-62.el7 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-04-09 21:29 修改: 2024-11-21 04:42

systemd CVE-2020-13529 中危 219-62.el7 systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-10 16:15 修改: 2024-11-21 05:01

systemd CVE-2020-13776 中危 219-62.el7 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13776

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-06-03 03:15 修改: 2025-06-09 16:15

systemd CVE-2021-3997 中危 219-62.el7 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23

systemd CVE-2022-3821 中危 219-62.el7 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-08 22:15 修改: 2025-05-02 18:15

systemd CVE-2022-4415 中危 219-62.el7 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-11 15:15 修改: 2025-11-03 20:15

systemd CVE-2022-45873 中危 219-62.el7 systemd: deadlock in systemd-coredump via a crash with a long backtrace

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45873

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-23 23:15 修改: 2025-04-25 19:15

systemd CVE-2023-26604 中危 219-62.el7 219-78.el7_9.11 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-03 16:15 修改: 2025-06-20 19:17

systemd CVE-2025-4598 中危 219-62.el7 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-30 14:15 修改: 2026-05-19 16:16

systemd CVE-2026-29111 中危 219-62.el7 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-23 22:16 修改: 2026-04-15 16:44

systemd CVE-2026-4105 中危 219-62.el7 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-13 19:55 修改: 2026-04-30 17:16

curl CVE-2022-27780 中危 7.29.0-59.el7_9.1 curl: percent-encoded path separator in URL host

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27780

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 06:56

curl CVE-2022-27782 中危 7.29.0-59.el7_9.1 curl: TLS and SSH connection too eager reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27782

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

curl CVE-2022-30115 中危 7.29.0-59.el7_9.1 curl: HSTS bypass via trailing dot

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30115

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2024-11-21 07:02

curl CVE-2022-32208 中危 7.29.0-59.el7_9.1 curl: FTP-KRB bad message verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32208

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-07-07 13:15 修改: 2025-05-05 17:18

curl CVE-2022-43551 中危 7.29.0-59.el7_9.1 curl: HSTS bypass via IDN

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-12-23 15:15 修改: 2026-02-13 20:16

systemd-libs CVE-2013-4392 中危 219-62.el7 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13

systemd-libs CVE-2017-18078 中危 219-62.el7 systemd: Unsafe handling of hard links allowing privilege escalation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18078

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-01-29 05:29 修改: 2024-11-21 03:19

systemd-libs CVE-2018-15686 中危 219-62.el7 219-67.el7 systemd: line splitting via fgets() allows for state injection during daemon-reexec

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15686

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-26 14:29 修改: 2025-06-09 16:15

systemd-libs CVE-2018-16866 中危 219-62.el7 219-67.el7 systemd: out-of-bounds read when parsing a crafted syslog message

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16866

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-11 19:29 修改: 2024-11-21 03:53

systemd-libs CVE-2018-6954 中危 219-62.el7 systemd: Mishandled symlinks in systemd-tmpfiles allows local users to obtain ownership of arbitrary files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6954

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-13 20:29 修改: 2025-06-09 16:15

systemd-libs CVE-2019-3842 中危 219-62.el7 systemd: Spoofing of XDG_SEAT allows for actions to be checked against "allow_active" instead of "allow_any"

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3842

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-04-09 21:29 修改: 2024-11-21 04:42

systemd-libs CVE-2020-13529 中危 219-62.el7 systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-10 16:15 修改: 2024-11-21 05:01

systemd-libs CVE-2020-13776 中危 219-62.el7 systemd: Mishandles numerical usernames beginning with decimal digits or 0x followed by hexadecimal digits

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13776

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-06-03 03:15 修改: 2025-06-09 16:15

systemd-libs CVE-2021-3997 中危 219-62.el7 systemd: Uncontrolled recursion in systemd-tmpfiles when removing files

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3997

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-23 20:15 修改: 2024-11-21 06:23

systemd-libs CVE-2022-3821 中危 219-62.el7 systemd: buffer overrun in format_timespan() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-08 22:15 修改: 2025-05-02 18:15

systemd-libs CVE-2022-4415 中危 219-62.el7 systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-11 15:15 修改: 2025-11-03 20:15

systemd-libs CVE-2022-45873 中危 219-62.el7 systemd: deadlock in systemd-coredump via a crash with a long backtrace

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45873

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-11-23 23:15 修改: 2025-04-25 19:15

systemd-libs CVE-2023-26604 中危 219-62.el7 219-78.el7_9.11 systemd: privilege escalation via the less pager

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26604

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-03 16:15 修改: 2025-06-20 19:17

systemd-libs CVE-2025-4598 中危 219-62.el7 systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-05-30 14:15 修改: 2026-05-19 16:16

systemd-libs CVE-2026-29111 中危 219-62.el7 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-23 22:16 修改: 2026-04-15 16:44

systemd-libs CVE-2026-4105 中危 219-62.el7 systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-13 19:55 修改: 2026-04-30 17:16

tar CVE-2005-2541 中危 2:1.26-35.el7 tar: does not properly warn the user when extracting setuid or setgid files

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27

tar CVE-2016-6321 中危 2:1.26-35.el7 tar: Bypassing the extract path name

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6321

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-12-09 22:59 修改: 2026-05-06 22:30

tar CVE-2022-48303 中危 2:1.26-35.el7 tar: heap buffer overflow at from_header() in list.c via specially crafted checksum

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-30 04:15 修改: 2025-03-27 21:15

tar CVE-2025-45582 中危 2:1.26-35.el7 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-11 17:15 修改: 2025-11-02 01:15

tar CVE-2025-64118 中危 2:1.26-35.el7 node-tar: tar: node-tar: Information disclosure via reading a truncated tar file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-64118

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-30 18:15 修改: 2026-04-15 00:35

tar CVE-2026-33056 中危 2:1.26-35.el7 tar-rs: tar-rs: Arbitrary directory permission modification via crafted tar archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33056

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-20 08:16 修改: 2026-03-24 16:17

tar CVE-2026-5704 中危 2:1.26-35.el7 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-06 16:16 修改: 2026-04-22 20:08

util-linux CVE-2014-9114 中危 2.23.2-59.el7 util-linux: command injection flaw in blkid

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9114

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-31 16:59 修改: 2026-05-13 00:24

util-linux CVE-2016-2779 中危 2.23.2-59.el7 util-linux: runuser tty hijack via TIOCSTI ioctl

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2779

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-07 15:59 修改: 2026-05-13 00:24

util-linux CVE-2020-21583 中危 2.23.2-59.el7 util-linux: arbitrary commands execution via the path parameter

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-21583

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-12-20 13:15

util-linux CVE-2022-0563 中危 2.23.2-59.el7 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-21 19:15 修改: 2025-06-09 16:15

util-linux CVE-2025-14104 中危 2.23.2-59.el7 util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-05 17:16 修改: 2026-04-19 20:16

curl CVE-2023-27535 中危 7.29.0-59.el7_9.1 curl: FTP too eager connection reuse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27535

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

curl CVE-2023-27536 中危 7.29.0-59.el7_9.1 curl: GSS delegation too eager connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27536

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-02-14 16:15

curl CVE-2023-27538 中危 7.29.0-59.el7_9.1 curl: SSH connection too eager reuse still

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27538

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-06-09 15:15

vim-minimal CVE-2019-20807 中危 2:7.4.160-5.el7 vim: users can execute arbitrary OS commands via scripting interfaces in the rvim restricted mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20807

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-05-28 14:15 修改: 2024-11-21 04:39

vim-minimal CVE-2021-3778 中危 2:7.4.160-5.el7 vim: heap-based buffer overflow in utf_ptr2char() in mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3778

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-09-15 08:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3796 中危 2:7.4.160-5.el7 vim: use-after-free in nv_replace() in normal.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3796

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-09-15 13:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3872 中危 2:7.4.160-5.el7 vim: heap-based buffer overflow in win_redr_status() in drawscreen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3872

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-10-19 13:15 修改: 2025-11-03 21:15

vim-minimal CVE-2021-3984 中危 2:7.4.160-5.el7 vim: illegal memory access in find_start_brace() in cindent.c when C-indenting

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3984

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-01 11:15 修改: 2024-11-21 06:23

vim-minimal CVE-2021-4019 中危 2:7.4.160-5.el7 vim: heap-based buffer overflow in find_help_tags() in help.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4019

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-01 10:15 修改: 2026-05-29 20:09

vim-minimal CVE-2021-4192 中危 2:7.4.160-5.el7 vim: use-after-free in win_linetabsize()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4192

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-31 15:15 修改: 2024-11-21 06:37

vim-minimal CVE-2021-4193 中危 2:7.4.160-5.el7 vim: out-of-bound read in getvcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4193

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-31 16:15 修改: 2024-11-21 06:37

vim-minimal CVE-2022-0359 中危 2:7.4.160-5.el7 vim: Heap-based buffer overflow in init_ccline() in ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0359

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-26 12:15 修改: 2025-11-03 21:15

vim-minimal CVE-2022-1621 中危 2:7.4.160-5.el7 vim: heap buffer overflow in vim_strncpy

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1621

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-05-10 14:15 修改: 2024-11-21 06:41

vim-minimal CVE-2022-1629 中危 2:7.4.160-5.el7 vim: buffer over-read in function find_next_quote

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1629

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-05-10 14:15 修改: 2024-11-21 06:41

vim-minimal CVE-2024-43790 中危 2:7.4.160-5.el7 vim: Out of bounds read when performing a search command

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43790

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-22 22:15 修改: 2025-08-18 17:08

vim-minimal CVE-2025-29768 中危 2:7.4.160-5.el7 vim: Vim vulnerable to potential data loss with zip.vim and special crafted zip files

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-29768

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-03-13 17:15 修改: 2025-08-18 14:14

vim-minimal CVE-2025-53905 中危 2:7.4.160-5.el7 vim: Vim path traversial

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53905

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-15 21:15 修改: 2025-11-04 22:16

vim-minimal CVE-2025-53906 中危 2:7.4.160-5.el7 vim: Vim path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-53906

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-07-15 21:15 修改: 2026-04-01 19:16

vim-minimal CVE-2025-9390 中危 2:7.4.160-5.el7 vim: vim xxd xxd.c main buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9390

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-08-24 14:15 修改: 2026-04-29 01:00

vim-minimal CVE-2026-25749 中危 2:7.4.160-5.el7 2:7.4.629-8.el7_9.1 vim: Vim: Arbitrary code execution via 'helpfile' option processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25749

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-06 23:15 修改: 2026-02-20 15:45

vim-minimal CVE-2026-28417 中危 2:7.4.160-5.el7 2:7.4.629-8.el7_9.1 vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28417

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-27 22:16 修改: 2026-03-03 17:50

vim-minimal CVE-2026-28418 中危 2:7.4.160-5.el7 vim: Vim: Information disclosure via heap-based buffer overflow in Emacs-style tags file parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28418

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-27 22:16 修改: 2026-03-03 17:49

vim-minimal CVE-2026-28419 中危 2:7.4.160-5.el7 vim: Vim: Information disclosure and denial of service via malformed tags file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28419

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-27 22:16 修改: 2026-03-04 21:22

vim-minimal CVE-2026-28420 中危 2:7.4.160-5.el7 vim: Vim: Information disclosure and denial of service via crafted Unicode characters in terminal emulator

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28420

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-27 22:16 修改: 2026-03-04 20:47

vim-minimal CVE-2026-28421 中危 2:7.4.160-5.el7 2:7.4.629-8.el7_9.1 vim: Vim: Denial of service and information disclosure via crafted swap file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28421

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-27 22:16 修改: 2026-03-04 20:47

vim-minimal CVE-2026-35177 中危 2:7.4.160-5.el7 vim: zip.vim: Vim zip.vim plugin: Arbitrary file overwrite via path traversal bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-35177

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-06 18:16 修改: 2026-04-20 18:28

vim-minimal CVE-2026-39881 中危 2:7.4.160-5.el7 vim: Vim: Arbitrary code execution via command injection in NetBeans interface

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39881

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-08 21:17 修改: 2026-04-22 16:50

vim-minimal CVE-2026-41411 中危 2:7.4.160-5.el7 vim: Vim: Command injection allows arbitrary code execution via malicious tag files

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41411

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-24 17:16 修改: 2026-04-27 13:39

vim-minimal CVE-2026-44656 中危 2:7.4.160-5.el7 vim: Vim: Arbitrary command execution via :find command-line completion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44656

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-08 23:16 修改: 2026-05-14 13:59

vim-minimal CVE-2026-45130 中危 2:7.4.160-5.el7 vim: Vim: Heap buffer overflow allows arbitrary code execution or denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45130

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-08 23:16 修改: 2026-05-18 14:22

vim-minimal CVE-2026-46483 中危 2:7.4.160-5.el7 vim: command injection when decompressing .tgz archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-46483

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-05-15 15:16 修改: 2026-05-19 12:27

curl CVE-2023-28321 中危 7.29.0-59.el7_9.1 curl: IDN wildcard match may lead to Improper Cerificate Validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28321

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-05-26 21:15 修改: 2025-01-15 16:15

xz CVE-2026-34743 中危 5.2.2-1.el7 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-02 19:21 修改: 2026-04-15 17:33

curl CVE-2024-2398 中危 7.29.0-59.el7_9.1 curl: HTTP/2 push headers memory-leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2398

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2024-03-27 08:15 修改: 2025-07-30 19:42

xz-libs CVE-2026-34743 中危 5.2.2-1.el7 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-02 19:21 修改: 2026-04-15 17:33

curl CVE-2025-13034 中危 7.29.0-59.el7_9.1 curl: Public key pinning bypass via QUIC and GnuTLS allows server impersonation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13034

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:54

zlib CVE-2022-37434 中危 1.2.7-18.el7 1.2.7-21.el7_9 zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-05 07:15 修改: 2025-05-30 20:15

zlib CVE-2023-45853 中危 1.2.7-18.el7 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-10-14 02:15 修改: 2024-12-20 17:41

ncurses CVE-2017-13728 低危 5.9-14.20130511.el7_4 ncurses: Infinite loop in the next_char function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13729 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the _nc_save_str function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13730 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function _nc_read_entry_source()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13731 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function postprocess_termcap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13732 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function dump_uses()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13733 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function fmt_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-13734 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function _nc_safe_strcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses CVE-2017-16879 低危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow in the _nc_write_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

ncurses CVE-2018-19211 低危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses CVE-2020-19185 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses CVE-2020-19186 低危 5.9-14.20130511.el7_4 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses CVE-2020-19187 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses CVE-2020-19188 低危 5.9-14.20130511.el7_4 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses CVE-2020-19189 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses CVE-2020-19190 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses CVE-2021-39537 低危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19

ncurses CVE-2023-50495 低危 5.9-14.20130511.el7_4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-12-12 15:15 修改: 2025-11-04 19:16

binutils CVE-2018-18605 低危 2.27-34.base.el7 binutils: heap-based buffer over-read in sec_merge_hash_lookup in merge.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18605

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-23 17:29 修改: 2024-11-21 03:56

binutils CVE-2018-18606 低危 2.27-34.base.el7 binutils: NULL pointer dereference in _bfd_add_merge_section in merge_strings function in merge.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18606

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-23 17:29 修改: 2024-11-21 03:56

binutils CVE-2018-18607 低危 2.27-34.base.el7 binutils: NULL pointer dereference in elf_link_input_bfd in elflink.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18607

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-23 17:29 修改: 2024-11-21 03:56

binutils CVE-2018-18700 低危 2.27-34.base.el7 binutils: Recursive Stack Overflow within function d_name, d_encoding, and d_local_name in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18700

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-29 12:29 修改: 2024-11-21 03:56

binutils CVE-2018-18701 低危 2.27-34.base.el7 binutils: infinite recursion in next_is_type_qual and cplus_demangle_type functions in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18701

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-29 12:29 修改: 2024-11-21 03:56

glib2 CVE-2015-8386 低危 2.56.1-2.el7 pcre: Buffer overflow caused by lookbehind assertion (8.38/6)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8386

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

ncurses-base CVE-2017-11112 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in append_acs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-base CVE-2017-11113 低危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-base CVE-2017-13728 低危 5.9-14.20130511.el7_4 ncurses: Infinite loop in the next_char function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13729 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the _nc_save_str function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13730 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function _nc_read_entry_source()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13731 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function postprocess_termcap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13732 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function dump_uses()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13733 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function fmt_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-13734 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function _nc_safe_strcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-base CVE-2017-16879 低危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow in the _nc_write_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

ncurses-base CVE-2018-19211 低危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-base CVE-2020-19185 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19186 低危 5.9-14.20130511.el7_4 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19187 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19188 低危 5.9-14.20130511.el7_4 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19189 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-base CVE-2020-19190 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-base CVE-2021-39537 低危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19

ncurses-base CVE-2023-50495 低危 5.9-14.20130511.el7_4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-12-12 15:15 修改: 2025-11-04 19:16

glib2 CVE-2017-11164 低危 2.56.1-2.el7 pcre: OP_KETRMAX feature in the match function in pcre_exec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-11 03:29 修改: 2025-04-20 01:37

glib2 CVE-2017-7244 低危 2.56.1-2.el7 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7244

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

glib2 CVE-2017-7245 低危 2.56.1-2.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

glib2 CVE-2017-7246 低危 2.56.1-2.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

glib2 CVE-2018-16429 低危 2.56.1-2.el7 glib2: Out-of-bounds read in g_markup_parse_context_parse() in gmarkup.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16429

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-04 00:29 修改: 2024-11-21 03:52

glib2 CVE-2018-5818 低危 2.56.1-2.el7 2.56.1-5.el7 LibRaw: DoS in parse_rollei function in internal/dcraw_common.cpp

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5818

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-20 18:29 修改: 2024-11-21 04:09

ncurses-libs CVE-2017-11112 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in append_acs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-libs CVE-2017-11113 低危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses-libs CVE-2017-13728 低危 5.9-14.20130511.el7_4 ncurses: Infinite loop in the next_char function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13728

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13729 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the _nc_save_str function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13730 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function _nc_read_entry_source()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13730

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13731 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function postprocess_termcap()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13731

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13732 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function dump_uses()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13732

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13733 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function fmt_entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13733

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-13734 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in the function _nc_safe_strcat

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13734

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

ncurses-libs CVE-2017-16879 低危 5.9-14.20130511.el7_4 ncurses: Stack-based buffer overflow in the _nc_write_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16879

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-22 22:29 修改: 2025-04-20 01:37

ncurses-libs CVE-2018-19211 低危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference at function _nc_parse_entry in parse_entry.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19211

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-11-12 19:29 修改: 2024-11-21 03:57

ncurses-libs CVE-2020-19185 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in one_one_mapping function in progs/dump_entry.c:1373

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19185

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19186 低危 5.9-14.20130511.el7_4 ncurses: Buffer overflow in _nc_find_entry function in tinfo/comp_hash.c:66

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19186

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19187 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in fmt_entry function in progs/dump_entry.c:1100

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19187

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:15 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19188 低危 5.9-14.20130511.el7_4 ncurses: Stack buffer overflow in fmt_entry function in progs/dump_entry.c:1116

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19188

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19189 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in postprocess_terminfo function in tinfo/parse_entry.c:997

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19189

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-libs CVE-2020-19190 低危 5.9-14.20130511.el7_4 ncurses: Heap buffer overflow in _nc_find_entry in tinfo/comp_hash.c:70

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-19190

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 05:09

ncurses-libs CVE-2021-39537 低危 5.9-14.20130511.el7_4 ncurses: heap-based buffer overflow in _nc_captoinfo() in captoinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39537

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-09-20 16:15 修改: 2024-11-21 06:19

ncurses-libs CVE-2023-50495 低危 5.9-14.20130511.el7_4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-12-12 15:15 修改: 2025-11-04 19:16

glib2 CVE-2018-5819 低危 2.56.1-2.el7 2.56.1-5.el7 LibRaw: DoS in parse_sinar_ia function in internal/dcraw_common.cpp

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5819

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-20 18:29 修改: 2024-11-21 04:09

glib2 CVE-2019-13012 低危 2.56.1-2.el7 glib2: insecure permissions for files and directories

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13012

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-28 15:15 修改: 2024-11-21 04:24

glib2 CVE-2021-28153 低危 2.56.1-2.el7 glib: g_file_replace() with G_FILE_CREATE_REPLACE_DESTINATION creates empty target for dangling symlink

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28153

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-11 22:15 修改: 2024-11-21 05:59

glib2 CVE-2023-29499 低危 2.56.1-2.el7 glib: GVariant offset table entry size is not checked in is_normal()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29499

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-14 20:15 修改: 2024-11-21 07:57

glib2 CVE-2023-32611 低危 2.56.1-2.el7 glib: g_variant_byteswap() can take a long time with some non-normal inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32611

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-14 20:15 修改: 2024-11-21 08:03

glib2 CVE-2023-32636 低危 2.56.1-2.el7 glib: Timeout in fuzz_variant_text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32636

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-14 20:15 修改: 2024-11-21 08:03

glib2 CVE-2023-32665 低危 2.56.1-2.el7 glib: GVariant deserialisation does not match spec for non-normal data

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-32665

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-14 20:15 修改: 2024-11-21 08:03

glib2 CVE-2025-3360 低危 2.56.1-2.el7 glibc: GLib prior to 2.82.5 is vulnerable to integer overflow and buffer under-read when parsing a very long invalid ISO 8601 timestamp with g_date_time_new_from_iso8601().

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3360

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-07 13:15 修改: 2026-04-15 00:35

glib2 CVE-2025-7039 低危 2.56.1-2.el7 glib: Buffer Under-read on GLib through glib/gfileutils.c via get_tmp_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7039

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-09-03 02:15 修改: 2026-06-02 14:16

glib2 CVE-2026-0988 低危 2.56.1-2.el7 glib: GLib: Denial of Service via Integer Overflow in g_buffered_input_stream_peek()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0988

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-21 12:15 修改: 2026-04-24 21:16

glib2 CVE-2026-1485 低危 2.56.1-2.el7 Glib: Glib: Local denial of service via buffer underflow in content type parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1485

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 14:15 修改: 2026-04-15 00:35

binutils CVE-2018-19932 低危 2.27-34.base.el7 binutils: Integer overflow due to the IS_CONTAINED_BY_LMA macro resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-19932

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-12-07 07:29 修改: 2024-11-21 03:58

nspr CVE-2019-11727 低危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nspr CVE-2019-17023 低危 4.19.0-1.el7_5 4.25.0-2.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

binutils CVE-2018-20002 低危 2.27-34.base.el7 binutils: memory leak in _bfd_generic_read_minisymbols function in syms.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20002

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-12-10 02:29 修改: 2024-11-21 04:00

binutils CVE-2018-20657 低危 2.27-34.base.el7 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

binutils CVE-2018-6323 低危 2.27-34.base.el7 binutils: Integer overflow in elf_object_p function in elfcode.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6323

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-01-26 08:29 修改: 2024-11-21 04:10

binutils CVE-2018-6759 低危 2.27-34.base.el7 binutils: Unchecked strnlen in opncls.c:bfd_get_debug_link_info_1() can allow lead to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6759

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-06 21:29 修改: 2024-11-21 04:11

binutils CVE-2018-6872 低危 2.27-34.base.el7 binutils: out of bounds read in elf_parse_notes function in elf.c file in libbfd library

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6872

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-09 06:29 修改: 2024-11-21 04:11

binutils CVE-2019-1010204 低危 2.27-34.base.el7 binutils: Improper Input Validation, Signed/Unsigned Comparison, Out-of-bounds Read in gold/fileread.cc and elfcpp/elfcpp_file.h leads to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010204

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:18

binutils CVE-2019-12972 低危 2.27-34.base.el7 binutils: out-of-bounds read in setup_group in bfd/elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-12972

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-06-26 14:15 修改: 2024-11-21 04:23

binutils CVE-2019-14250 低危 2.27-34.base.el7 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

binutils CVE-2019-17450 低危 2.27-34.base.el7 binutils: denial of service via crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17450

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-10 17:15 修改: 2024-11-21 04:32

binutils CVE-2019-17451 低危 2.27-34.base.el7 binutils: integer overflow leading to a SEGV in _bfd_dwarf2_find_nearest_line in dwarf2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17451

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-10 17:15 修改: 2024-11-21 04:32

binutils CVE-2020-16591 低危 2.27-34.base.el7 binutils: invalid read in process_symbol_table could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16591

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

binutils CVE-2020-16593 低危 2.27-34.base.el7 binutils: Null Pointer Dereference in scan_unit_for_symbols could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16593

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

binutils CVE-2020-16599 低危 2.27-34.base.el7 binutils: Null Pointer Dereference in _bfd_elf_get_symbol_version_string could result in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16599

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-09 21:15 修改: 2024-11-21 05:07

binutils CVE-2020-35448 低危 2.27-34.base.el7 binutils: Heap-based buffer overflow in bfd_getl_signed_32() in libbfd.c because sh_entsize is not validated in _bfd_elf_slurp_secondary_reloc_section() in elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35448

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-12-27 04:15 修改: 2024-11-21 05:27

binutils CVE-2020-35493 低危 2.27-34.base.el7 binutils: heap-based buffer overflow in bfd_pef_parse_function_stubs function in bfd/pef.c via crafted PEF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35493

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2020-35494 低危 2.27-34.base.el7 binutils: usage of unitialized heap in tic4x_print_cond function in opcodes/tic4x-dis.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35494

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2020-35495 低危 2.27-34.base.el7 binutils: NULL pointer dereference in bfd_pef_parse_symbols function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2020-35496 低危 2.27-34.base.el7 binutils: NULL pointer dereference in bfd_pef_scan_start_address function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35496

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2020-35507 低危 2.27-34.base.el7 binutils: NULL pointer dereference in bfd_pef_parse_function_stubs function in bfd/pef.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35507

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-01-04 15:15 修改: 2024-11-21 05:27

binutils CVE-2021-3826 低危 2.27-34.base.el7 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

binutils CVE-2022-38533 低危 2.27-34.base.el7 binutils: heap-based buffer overflow in bfd_getl32() when called by strip_main() in objcopy.c via a crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38533

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-26 00:15 修改: 2024-11-21 07:16

binutils CVE-2022-44840 低危 2.27-34.base.el7 binutils: heap-based buffer overflow in find_section_in_set() in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-44840

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:28

binutils CVE-2022-47007 低危 2.27-34.base.el7 binutils: memory leak in stab_demangle_v3_arg() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47007

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

binutils CVE-2022-47008 低危 2.27-34.base.el7 binutils: memory leak in make_tempdir() and make_tempname() in bucomm.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47008

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

nss CVE-2019-11727 低危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss CVE-2019-17023 低危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

nss CVE-2020-12413 低危 3.36.0-7.el7_5 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-16 22:15 修改: 2025-03-19 16:15

nss CVE-2024-7531 低危 3.36.0-7.el7_5 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-06 13:15 修改: 2025-03-19 16:15

binutils CVE-2022-47010 低危 2.27-34.base.el7 binutils: memory leak in pr_function_type() in prdbg.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47010

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

binutils CVE-2022-47011 低危 2.27-34.base.el7 binutils: memory leak in parse_stab_struct_fields() in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-47011

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:31

binutils CVE-2023-1972 低危 2.27-34.base.el7 binutils: Illegal memory access when accessing a zer0-lengthverdef table

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1972

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-05-17 22:15 修改: 2025-01-22 20:15

binutils CVE-2023-25584 低危 2.27-34.base.el7 binutils: Out of bounds read in parse_module function in bfd/vms-alpha.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25584

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-14 21:15 修改: 2024-11-21 07:49

binutils CVE-2023-25585 低危 2.27-34.base.el7 binutils: Field `file_table` of `struct module *module` is uninitialized

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25585

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-14 21:15 修改: 2024-11-21 07:49

glibc CVE-2014-4043 低危 2.17-260.el7 glibc: posix_spawn_file_actions_addopen fails to copy the path argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-4043

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-10-06 23:55 修改: 2026-05-06 22:30

glibc CVE-2015-8982 低危 2.17-260.el7 glibc: multiple overflows in strxfrm()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8982

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-15 19:59 修改: 2026-05-13 00:24

glibc CVE-2015-8984 低危 2.17-260.el7 glibc: potential denial of service in internal_fnmatch()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8984

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc CVE-2015-8985 低危 2.17-260.el7 glibc: potential denial of service in pop_fail_stack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8985

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc CVE-2016-10228 低危 2.17-260.el7 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-02 01:59 修改: 2026-05-13 00:24

glibc CVE-2017-15671 低危 2.17-260.el7 glibc: Memory leak in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15671

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-20 17:29 修改: 2025-04-20 01:37

glibc CVE-2019-19126 低危 2.17-260.el7 2.17-317.el7 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-19 22:15 修改: 2024-11-21 04:34

glibc CVE-2020-27618 低危 2.17-260.el7 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-26 23:15 修改: 2025-06-09 16:15

glibc CVE-2021-33574 低危 2.17-260.el7 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-25 22:15 修改: 2024-11-21 06:09

glibc CVE-2024-33601 低危 2.17-260.el7 2.17-326.el7_9.3 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

nss-softokn CVE-2016-1938 低危 3.36.0-5.el7_5 NSS: Errors in mp_div and mp_exptmod cryptographic functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-01-31 18:59 修改: 2026-05-06 22:30

nss-softokn CVE-2019-11727 低危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-softokn CVE-2019-17023 低危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

glibc CVE-2024-33602 低危 2.17-260.el7 2.17-326.el7_9.3 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc CVE-2025-15281 低危 2.17-260.el7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 14:16 修改: 2026-02-05 17:43

glibc CVE-2026-4438 低危 2.17-260.el7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:40

binutils CVE-2023-25588 低危 2.27-34.base.el7 binutils: Field `the_bfd` of `asymbol` is uninitialized in function `bfd_mach_o_get_synthetic_symtab`

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25588

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-14 21:15 修改: 2024-11-21 07:49

binutils CVE-2024-57360 低危 2.27-34.base.el7 binutils: nm: potential segmentation fault when displaying symbols without version info

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-57360

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-21 21:15 修改: 2026-04-15 00:35

binutils CVE-2025-11412 低危 2.27-34.base.el7 binutils: GNU Binutils Linker elflink.c bfd_elf_gc_record_vtentry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11412

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-07 22:15 修改: 2026-05-12 13:16

binutils CVE-2025-11413 低危 2.27-34.base.el7 binutils: GNU Binutils Linker elflink.c elf_link_add_object_symbols out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11413

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-07 22:15 修改: 2026-05-12 13:16

binutils CVE-2025-11414 低危 2.27-34.base.el7 binutils: GNU Binutils Linker elflink.c get_link_hash_entry out-of-bounds

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11414

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-07 23:15 修改: 2026-05-12 13:16

binutils CVE-2025-11494 低危 2.27-34.base.el7 binutils: GNU Binutils Linker out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11494

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-08 20:15 修改: 2026-05-12 13:16

binutils CVE-2025-11495 低危 2.27-34.base.el7 binutils: GNU Binutils Linker heap-based overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11495

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-08 20:15 修改: 2026-05-12 13:16

binutils CVE-2025-1150 低危 2.27-34.base.el7 binutils: GNU Binutils ld libbfd.c bfd_malloc memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1150

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-10 17:15 修改: 2025-03-11 19:01

binutils CVE-2025-1151 低危 2.27-34.base.el7 binutils: GNU Binutils ld xmemdup.c xmemdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1151

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-10 17:15 修改: 2025-03-04 17:16

binutils CVE-2025-1152 低危 2.27-34.base.el7 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32

binutils CVE-2025-1153 低危 2.27-34.base.el7 binutils: GNU Binutils format.c bfd_set_format memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1153

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-10 19:15 修改: 2025-04-04 23:15

binutils CVE-2025-11839 低危 2.27-34.base.el7 binutils: GNU Binutils prdbg.c tg_tag_type return value

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11839

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-16 14:15 修改: 2026-05-12 13:16

nss-softokn-freebl CVE-2016-1938 低危 3.36.0-5.el7_5 NSS: Errors in mp_div and mp_exptmod cryptographic functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-01-31 18:59 修改: 2026-05-06 22:30

nss-softokn-freebl CVE-2019-11727 低危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-softokn-freebl CVE-2019-17023 低危 3.36.0-5.el7_5 3.53.1-6.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

binutils CVE-2025-11840 低危 2.27-34.base.el7 binutils: GNU Binutils out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11840

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-16 16:15 修改: 2026-05-12 13:16

binutils CVE-2025-3198 低危 2.27-34.base.el7 binutils: GNU Binutils objdump bucomm.c display_info memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3198

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-04-04 02:15 修改: 2026-05-12 13:17

binutils CVE-2025-66861 低危 2.27-34.base.el7 binutils: out-of-bounds read in d_unqualified_name() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66861

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:36

binutils CVE-2025-66862 低危 2.27-34.base.el7 binutils: heap-based buffer over-read in gnu_special() in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66862

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:36

binutils CVE-2025-66863 低危 2.27-34.base.el7 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66863

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:38

binutils CVE-2025-66864 低危 2.27-34.base.el7 binutils: NULL pointer dereference in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66864

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:40

binutils CVE-2025-66865 低危 2.27-34.base.el7 binutils: stack overflow in d_print_comp_inner() in cp-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66865

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:42

binutils CVE-2025-66866 低危 2.27-34.base.el7 binutils: BinUtils: Denial of Service via crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66866

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-12-29 17:15 修改: 2026-01-14 19:43

binutils CVE-2025-69644 低危 2.27-34.base.el7 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42

binutils CVE-2025-69645 低危 2.27-34.base.el7 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08

binutils CVE-2025-69646 低危 2.27-34.base.el7 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59

binutils CVE-2025-69647 低危 2.27-34.base.el7 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44

binutils CVE-2025-69648 低危 2.27-34.base.el7 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43

binutils CVE-2025-69649 低危 2.27-34.base.el7 binutils: NULL pointer dereference in readelf via crafted ELF binary with malformed header fields

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69649

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:51

binutils CVE-2025-69650 低危 2.27-34.base.el7 binutils: double free in readelf via crafted ELF binary with malformed relocation data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69650

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-06 19:16 修改: 2026-03-19 13:16

binutils CVE-2025-69651 低危 2.27-34.base.el7 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16

binutils CVE-2025-69652 低危 2.27-34.base.el7 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49

bind-license CVE-2013-5661 低危 32:9.9.4-72.el7 DNS response rate limiting can simplify cache poisoning attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-5661

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-05 19:15 修改: 2024-11-21 01:57

glibc-common CVE-2014-4043 低危 2.17-260.el7 glibc: posix_spawn_file_actions_addopen fails to copy the path argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-4043

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-10-06 23:55 修改: 2026-05-06 22:30

glibc-common CVE-2015-8982 低危 2.17-260.el7 glibc: multiple overflows in strxfrm()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8982

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-15 19:59 修改: 2026-05-13 00:24

glibc-common CVE-2015-8984 低危 2.17-260.el7 glibc: potential denial of service in internal_fnmatch()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8984

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc-common CVE-2015-8985 低危 2.17-260.el7 glibc: potential denial of service in pop_fail_stack()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8985

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-20 16:59 修改: 2026-05-13 00:24

glibc-common CVE-2016-10228 低危 2.17-260.el7 glibc: iconv program can hang when invoked with the -c option

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10228

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-02 01:59 修改: 2026-05-13 00:24

glibc-common CVE-2017-15671 低危 2.17-260.el7 glibc: Memory leak in glob with GLOB_TILDE

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15671

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-20 17:29 修改: 2025-04-20 01:37

nss-sysinit CVE-2019-11727 低危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-sysinit CVE-2019-17023 低危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

nss-sysinit CVE-2020-12413 低危 3.36.0-7.el7_5 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-16 22:15 修改: 2025-03-19 16:15

nss-sysinit CVE-2024-7531 低危 3.36.0-7.el7_5 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-06 13:15 修改: 2025-03-19 16:15

glibc-common CVE-2019-19126 低危 2.17-260.el7 2.17-317.el7 glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19126

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-19 22:15 修改: 2024-11-21 04:34

glibc-common CVE-2020-27618 低危 2.17-260.el7 glibc: iconv when processing invalid multi-byte input sequences fails to advance the input state, which could result in an infinite loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27618

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-26 23:15 修改: 2025-06-09 16:15

glibc-common CVE-2021-33574 低危 2.17-260.el7 glibc: mq_notify does not handle separately allocated thread attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33574

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-05-25 22:15 修改: 2024-11-21 06:09

glibc-common CVE-2024-33601 低危 2.17-260.el7 2.17-326.el7_9.3 glibc: netgroup cache may terminate daemon on memory allocation failure

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc-common CVE-2024-33602 低危 2.17-260.el7 2.17-326.el7_9.3 glibc: netgroup cache assumes NSS callback uses in-buffer strings

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-06 20:15 修改: 2026-05-12 12:16

glibc-common CVE-2025-15281 低危 2.17-260.el7 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-20 14:16 修改: 2026-02-05 17:43

glibc-common CVE-2026-4438 低危 2.17-260.el7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:40

bzip2 CVE-2016-3189 低危 1.0.6-13.el7 bzip2: heap use after free in bzip2recover

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3189

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2016-06-30 17:59 修改: 2026-05-06 22:30

bind-license CVE-2016-6170 低危 32:9.9.4-72.el7 bind: Improper restriction of zone size limit

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6170

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-07-06 14:59 修改: 2026-05-06 22:30

bzip2-devel CVE-2016-3189 低危 1.0.6-13.el7 bzip2: heap use after free in bzip2recover

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3189

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2016-06-30 17:59 修改: 2026-05-06 22:30

bind-license CVE-2018-5745 低危 32:9.9.4-72.el7 32:9.11.4-16.P2.el7 bind: An assertion failure if a trust anchor rolls over to an unsupported key algorithm when using managed-keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-09 16:15 修改: 2024-11-21 04:09

bzip2-libs CVE-2016-3189 低危 1.0.6-13.el7 bzip2: heap use after free in bzip2recover

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3189

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-06-30 17:59 修改: 2026-05-06 22:30

ca-certificates CVE-2023-37920 低危 2018.2.22-70.0.el7_5 python-certifi: Removal of e-Tugra root certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37920

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-07-25 21:15 修改: 2025-02-13 13:50

gnupg2 CVE-2014-3591 低危 2.0.22-5.el7_5 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3591

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:08

gnupg2 CVE-2015-0837 低危 2.0.22-5.el7_5 libgcrypt: last-level cache side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0837

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:23

gnupg2 CVE-2015-1606 低危 2.0.22-5.el7_5 gnupg2: invalid memory read using a garbled keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1606

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-20 19:15 修改: 2024-11-21 02:25

gnupg2 CVE-2015-1607 低危 2.0.22-5.el7_5 gnupg2: memcpy with overlapping ranges (keybox_search.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1607

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-20 19:15 修改: 2024-11-21 02:25

gnupg2 CVE-2018-9234 低危 2.0.22-5.el7_5 GnuPG: Unenforced configuration allows for apparently valid certifications actually signed by signing subkeys

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-9234

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-04-04 00:29 修改: 2024-11-21 04:15

gnupg2 CVE-2022-3219 低危 2.0.22-5.el7_5 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-23 20:15 修改: 2025-03-12 21:15

gnupg2 CVE-2025-30258 低危 2.0.22-5.el7_5 gnupg: verification DoS due to a malicious subkey in the keyring

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-03-19 20:15 修改: 2025-10-16 16:53

gnupg2 CVE-2026-24883 低危 2.0.22-5.el7_5 GnuPG: GnuPG: Denial of service due to specially crafted signature packet

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24883

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 19:16 修改: 2026-02-06 18:06

gpgme CVE-2014-3564 低危 1.3.2-5.el7 gpgme: heap-based buffer overflow in gpgsm status handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3564

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-10-20 17:55 修改: 2026-05-06 22:30

bind-license CVE-2019-6465 低危 32:9.9.4-72.el7 32:9.11.4-16.P2.el7 bind: Controls for zone transfers may not be properly applied to DLZs if the zones are writable

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6465

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-10-09 16:15 修改: 2024-11-21 04:46

bash CVE-2019-18276 低危 4.2.46-31.el7 bash: when effective UID is not equal to its real UID the saved UID is not dropped

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-18276

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-28 01:15 修改: 2025-06-09 16:15

nss-tools CVE-2019-11727 低危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-tools CVE-2019-17023 低危 3.36.0-7.el7_5 3.53.1-3.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

nss-tools CVE-2020-12413 低危 3.36.0-7.el7_5 nss: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-12413

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-02-16 22:15 修改: 2025-03-19 16:15

nss-tools CVE-2024-7531 低危 3.36.0-7.el7_5 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-06 13:15 修改: 2025-03-19 16:15

binutils CVE-2014-9939 低危 2.27-34.base.el7 binutils: buffer overflow in ihex.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9939

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-21 06:59 修改: 2026-05-13 00:24

coreutils CVE-2014-9471 低危 8.22-23.el7 coreutils: memory corruption flaw in parse_datetime()

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9471

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-01-16 16:59 修改: 2026-05-06 22:30

coreutils CVE-2015-4041 低危 8.22-23.el7 coreutils: heap buffer overflow in sort(1) keycompare_mb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-4041

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-24 17:15 修改: 2024-11-21 02:30

coreutils CVE-2015-4042 低危 8.22-23.el7 coreutils: possible buffer overflow in keycompare_mb()

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-4042

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-24 17:15 修改: 2024-11-21 02:30

binutils CVE-2015-8538 低危 2.27-34.base.el7 libdwarf: Out-of-bounds read in dwarf_leb.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8538

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-07 20:29 修改: 2026-05-13 00:24

binutils CVE-2016-2226 低危 2.27-34.base.el7 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4487 低危 2.27-34.base.el7 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

cpio CVE-2015-1197 低危 2.11-27.el7 cpio: directory traversal through symlinks

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1197

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-02-19 15:59 修改: 2026-05-06 22:30

cpio CVE-2016-2037 低危 2.11-27.el7 cpio: out of bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2037

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-02-22 15:59 修改: 2026-05-06 22:30

cpio CVE-2023-7216 低危 2.11-27.el7 CPIO: extraction allows symlinks which enables Remote Command Execution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7216

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-05 15:15 修改: 2026-02-25 19:29

cracklib CVE-2016-6318 低危 2.9.0-11.el7 cracklib: Stack-based buffer overflow when parsing large GECOS field

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6318

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-07 19:28 修改: 2026-05-06 22:30

cracklib-dicts CVE-2016-6318 低危 2.9.0-11.el7 cracklib: Stack-based buffer overflow when parsing large GECOS field

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6318

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-07 19:28 修改: 2026-05-06 22:30

binutils CVE-2016-4488 低危 2.27-34.base.el7 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

nss-util CVE-2019-11727 低危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: PKCS#1 v1.5 signatures can be used for TLS 1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-11727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-23 14:15 修改: 2024-11-21 04:21

nss-util CVE-2019-17023 低危 3.36.0-1.el7_5 3.53.1-1.el7_9 nss: TLS 1.3 HelloRetryRequest downgrade request sets client into invalid state

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-17023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-08 22:15 修改: 2024-11-21 04:31

binutils CVE-2016-4489 低危 2.27-34.base.el7 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4490 低危 2.27-34.base.el7 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4491 低危 2.27-34.base.el7 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4492 低危 2.27-34.base.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2016-4493 低危 2.27-34.base.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

binutils CVE-2017-12449 低危 2.27-34.base.el7 binutils: out of bounds heap read in _bfd_vms_save_sized_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12449

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12451 低危 2.27-34.base.el7 binutils: out of bounds stack read in _bfd_xcoff_read_ar_hdr function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12451

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12452 低危 2.27-34.base.el7 binutils: out of bounds heap read in bfd_mach_o_i386_canonicalize_one_reloc function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12452

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

krb5-libs CVE-2017-11462 低危 1.15.1-34.el7 krb5: Automatic sec context deletion could lead to double-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11462

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-13 16:29 修改: 2026-05-13 00:24

krb5-libs CVE-2024-26458 低危 1.15.1-34.el7 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-29 01:44 修改: 2025-05-23 15:39

krb5-libs CVE-2024-26461 低危 1.15.1-34.el7 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-29 01:44 修改: 2025-05-23 15:30

binutils CVE-2017-12453 低危 2.27-34.base.el7 binutils: out of bounds heap read in __bfd_vms_slurp_eeom function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12453

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12454 低危 2.27-34.base.el7 binutils: Arbitrary memory read in _bfd_vms_slurp_egs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12454

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12455 低危 2.27-34.base.el7 binutils: out of bounds heap read in evax_bfd_print_emh function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12455

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12456 低危 2.27-34.base.el7 binutils: out of bounds heap read in read_symbol_stabs_debugging_inf function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12456

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

binutils CVE-2017-12457 低危 2.27-34.base.el7 binutils: NULL pointer dereference in bfd_make_section_with_flags function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12457

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

libblkid CVE-2015-5218 低危 2.23.2-59.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

libblkid CVE-2021-37600 低危 2.23.2-59.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

binutils CVE-2017-12458 低危 2.27-34.base.el7 binutils: out of bounds heap read in nlm_swap_auxiliary_headers_in function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12458

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-04 15:29 修改: 2026-05-13 00:24

openldap CVE-2016-4984 低危 2.4.44-20.el7 openldap-servers: /usr/libexec/openldap/generate-server-cert.sh create world readable password file

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4984

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-17 13:18 修改: 2025-04-20 01:37

openldap CVE-2020-15719 低危 2.4.44-20.el7 openldap: Certificate validation incorrectly matches name against CN-ID

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-07-14 14:15 修改: 2024-11-21 05:06

openldap CVE-2023-2953 低危 2.4.44-20.el7 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-05-30 22:15 修改: 2025-01-10 22:15

binutils CVE-2017-12799 低危 2.27-34.base.el7 binutils: Heap-based 1 byte buffer over-write in elf_read_notes function in bfd/elf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12799

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-10 18:29 修改: 2026-05-13 00:24

libcap CVE-2023-2602 低危 2.22-9.el7 libcap: Memory Leak on pthread_create() Error

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2602

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-06-06 20:15 修改: 2024-11-21 07:58

binutils CVE-2017-12967 低危 2.27-34.base.el7 binutils: Stack-based buffer over-read in getsym function in tekhex.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-12967

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-19 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-13710 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the setup_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13710

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-27 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-13716 低危 2.27-34.base.el7 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24

binutils CVE-2017-13757 低危 2.27-34.base.el7 binutils: heap-based buffer over-read in elf_i386_get_synthetic_symtab in elf32-i386.c and elf_x86_64_get_synthetic_symtab in elf64-x86-64.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13757

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 23:29 修改: 2026-05-13 00:24

libcom_err CVE-2015-1572 低危 1.42.9-13.el7 e2fsprogs: potential buffer overflow in closefs() (incomplete CVE-2015-0247 fix)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-1572

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-02-24 15:59 修改: 2026-05-06 22:30

binutils CVE-2017-14128 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in the decode_line_info function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14128

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-04 20:29 修改: 2026-05-13 00:24

binutils CVE-2017-14129 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in the read_section function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14129

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-04 20:29 修改: 2026-05-13 00:24

binutils CVE-2017-14130 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in the _bfd_elf_parse_attributes function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14130

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-04 20:29 修改: 2026-05-13 00:24

binutils CVE-2017-14529 低危 2.27-34.base.el7 binutils: heap-based buffer over-read in bfd_getl16 function in peXXigen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14529

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-18 00:29 修改: 2026-05-13 00:24

binutils CVE-2017-14729 低危 2.27-34.base.el7 binutils: Heap buffer overflow in the *_get_synthetic_symtab functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14729

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-25 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-14745 低危 2.27-34.base.el7 binutils: Integer overflow in the *_get_synthetic_symtab functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-26 16:29 修改: 2026-05-13 00:24

binutils CVE-2017-14930 低危 2.27-34.base.el7 binutils: Memory leak in decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14930

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14932 低危 2.27-34.base.el7 binutils: Infinite loop in the decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14932

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14933 低危 2.27-34.base.el7 binutils: Infinite loop in read_formatted_entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14933

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14934 低危 2.27-34.base.el7 binutils: Infinite loop in process_debug_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14934

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14938 低危 2.27-34.base.el7 binutils: Excessive memory allocation in _bfd_elf_slurp_version_tables

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14939 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in the decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14939

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

openssl-libs CVE-2018-0734 低危 1:1.0.2k-16.el7 1:1.0.2k-19.el7 openssl: timing side channel attack in the DSA signature algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0734

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-30 12:29 修改: 2024-11-21 03:38

openssl-libs CVE-2018-0735 低危 1:1.0.2k-16.el7 1:1.0.2k-16.el7_6.1 openssl: timing side channel attack in the ECDSA signature generation

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-0735

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-29 13:29 修改: 2024-11-21 03:38

openssl-libs CVE-2019-1551 低危 1:1.0.2k-16.el7 openssl: Integer overflow in RSAZ modular exponentiation on x86_64

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1551

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-12-06 18:15 修改: 2024-11-21 04:36

openssl-libs CVE-2019-1563 低危 1:1.0.2k-16.el7 openssl: information disclosure in PKCS7_dataDecode and CMS_decrypt_set1_pkey

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1563

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-10 17:15 修改: 2024-11-21 04:36

openssl-libs CVE-2020-1968 低危 1:1.0.2k-16.el7 openssl: Information exposure when DH secret are reused across multiple TLS connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-1968

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-09-09 14:15 修改: 2026-04-16 15:16

openssl-libs CVE-2022-3358 低危 1:1.0.2k-16.el7 openssl: Using a Custom Cipher with NID_undef may lead to NULL encryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3358

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-11 15:15 修改: 2024-11-21 07:19

openssl-libs CVE-2023-0464 低危 1:1.0.2k-16.el7 openssl: Denial of service by excessive resource usage in verifying X509 policy constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-22 17:15 修改: 2025-05-05 16:15

openssl-libs CVE-2023-0465 低危 1:1.0.2k-16.el7 openssl: Invalid certificate policies in leaf certificates are silently ignored

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-28 15:15 修改: 2025-02-18 21:15

openssl-libs CVE-2023-3446 低危 1:1.0.2k-16.el7 openssl: Excessive time spent checking DH keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-07-19 12:15 修改: 2025-04-23 17:16

openssl-libs CVE-2023-3817 低危 1:1.0.2k-16.el7 OpenSSL: Excessive time spent checking DH q parameter value

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-07-31 16:15 修改: 2025-05-05 16:15

openssl-libs CVE-2023-5678 低危 1:1.0.2k-16.el7 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-06 16:15 修改: 2026-05-12 11:16

openssl-libs CVE-2023-6129 低危 1:1.0.2k-16.el7 openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-01-09 17:15 修改: 2026-05-12 11:16

openssl-libs CVE-2024-0727 低危 1:1.0.2k-16.el7 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-01-26 09:15 修改: 2026-05-12 12:16

openssl-libs CVE-2024-13176 低危 1:1.0.2k-16.el7 openssl: Timing side-channel in ECDSA signature computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-20 14:15 修改: 2026-04-15 00:35

openssl-libs CVE-2024-41996 低危 1:1.0.2k-16.el7 openssl: remote attackers (from the client side) to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41996

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-26 06:15 修改: 2026-05-12 12:17

openssl-libs CVE-2024-5535 低危 1:1.0.2k-16.el7 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-27 11:15 修改: 2026-05-12 12:17

openssl-libs CVE-2025-15468 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-02-02 18:38

openssl-libs CVE-2025-15469 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-02-02 18:37

openssl-libs CVE-2025-68160 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2025-69418 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2025-69420 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2025-69421 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-22795 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-22796 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-27 16:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-28387 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-28388 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-28389 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

openssl-libs CVE-2026-31789 低危 1:1.0.2k-16.el7 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-07 22:16 修改: 2026-05-12 13:17

binutils CVE-2017-14940 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the scan_unit_for_symbols

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14940

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-09-30 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-14974 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the *_get_synthetic_symtab functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14974

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-02 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15020 低危 2.27-34.base.el7 binutils: Heap-based buffer overflow in parse_die

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15020

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15021 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in bfd_get_debug_link_info_1

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15021

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15022 低危 2.27-34.base.el7 binutils: NULL pointer dereference in dwarf2.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15022

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15023 低危 2.27-34.base.el7 binutils: NULL pointer dereference in read_formatted_entries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15023

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15024 低危 2.27-34.base.el7 binutils: Infinite recursion in find_abstract_instance_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15024

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15025 低危 2.27-34.base.el7 binutils: Divide-by-zero in decode_line_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15025

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-15225 低危 2.27-34.base.el7 binutils: Memory leak in _bfd_dwarf2_cleanup_debug_info

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15225

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-10 23:29 修改: 2026-05-13 00:24

binutils CVE-2017-15938 低危 2.27-34.base.el7 binutils: Invalid memory read in find_abstract_instance_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15938

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-27 21:29 修改: 2025-04-20 01:37

pcre CVE-2015-8382 低危 8.32-17.el7 php: Regular Expression Uninitialized Pointer Information Disclosure Vulnerability (ZDI-CAN-2547)

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8382

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-12-02 01:59 修改: 2026-05-06 22:30

pcre CVE-2017-11164 低危 8.32-17.el7 pcre: OP_KETRMAX feature in the match function in pcre_exec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-11 03:29 修改: 2025-04-20 01:37

pcre CVE-2017-7244 低危 8.32-17.el7 pcre: invalid memory read in _pcre32_xclass (pcre_xclass.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7244

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

pcre CVE-2017-7245 低危 8.32-17.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

pcre CVE-2017-7246 低危 8.32-17.el7 pcre: stack-based buffer overflow write in pcre32_copy_substring

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 21:59 修改: 2026-05-13 00:24

pcre CVE-2020-14155 低危 8.32-17.el7 pcre: Integer overflow when parsing callout numeric arguments

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14155

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-06-15 17:15 修改: 2024-11-21 05:02

curl CVE-2016-0755 低危 7.29.0-59.el7_9.1 curl: NTLM credentials not-checked for proxy connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-0755

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2016-01-29 20:59 修改: 2026-05-06 22:30

procps-ng CVE-2018-1121 低危 3.3.10-23.el7 procps: process hiding through race condition enumerating /proc

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1121

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-13 20:29 修改: 2024-11-21 03:59

procps-ng CVE-2018-1123 低危 3.3.10-23.el7 procps: denial of service in ps via mmap buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1123

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-05-23 14:29 修改: 2024-11-21 03:59

procps-ng CVE-2018-1125 低危 3.3.10-23.el7 procps: stack buffer overflow in pgrep

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1125

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-05-23 14:29 修改: 2025-12-17 22:15

procps-ng CVE-2023-4016 低危 3.3.10-23.el7 procps: ps buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-02 05:15 修改: 2024-11-21 08:34

curl CVE-2016-8616 低危 7.29.0-59.el7_9.1 curl: Case insensitive password comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8616

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2016-8621 低危 7.29.0-59.el7_9.1 curl: curl_getdate out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8621

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

curl CVE-2016-8622 低危 7.29.0-59.el7_9.1 curl: URL unescape heap overflow via integer truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8622

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

curl CVE-2016-8623 低危 7.29.0-59.el7_9.1 curl: Use-after-free via shared cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8623

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

curl CVE-2016-9586 低危 7.29.0-59.el7_9.1 curl: printf floating point buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9586

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-04-23 18:29 修改: 2024-11-21 03:01

curl CVE-2017-1000100 低危 7.29.0-59.el7_9.1 curl: TFTP sends more than buffer size

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000100

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

curl CVE-2017-7407 低危 7.29.0-59.el7_9.1 curl: --write-out out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7407

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-04-03 20:59 修改: 2026-05-13 00:24

curl CVE-2018-20483 低危 7.29.0-59.el7_9.1 wget: Information exposure in set_file_metadata function in xattr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20483

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-12-26 18:29 修改: 2024-11-21 04:01

curl CVE-2020-8231 低危 7.29.0-59.el7_9.1 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38

curl CVE-2021-22898 低危 7.29.0-59.el7_9.1 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-06-11 16:15 修改: 2026-04-16 14:16

curl CVE-2021-22925 低危 7.29.0-59.el7_9.1 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-08-05 21:15 修改: 2026-04-16 17:16

curl CVE-2022-27781 低危 7.29.0-59.el7_9.1 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

curl CVE-2022-35252 低危 7.29.0-59.el7_9.1 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-09-23 14:15 修改: 2025-05-05 17:18

curl CVE-2022-43552 低危 7.29.0-59.el7_9.1 7.29.0-59.el7_9.2 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-02-09 20:15 修改: 2024-11-21 07:26

curl CVE-2023-27534 低危 7.29.0-59.el7_9.1 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-04-23 17:16

curl CVE-2023-28322 低危 7.29.0-59.el7_9.1 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-05-26 21:15 修改: 2026-02-13 20:16

curl CVE-2023-38546 低危 7.29.0-59.el7_9.1 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-10-18 04:15 修改: 2026-05-12 11:16

curl CVE-2024-11053 低危 7.29.0-59.el7_9.1 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2024-12-11 08:15 修改: 2025-11-03 21:16

curl CVE-2024-7264 低危 7.29.0-59.el7_9.1 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2024-07-31 08:15 修改: 2025-11-03 23:17

libcurl CVE-2016-0755 低危 7.29.0-59.el7_9.1 curl: NTLM credentials not-checked for proxy connection re-use

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-0755

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2016-01-29 20:59 修改: 2026-05-06 22:30

libcurl CVE-2016-8616 低危 7.29.0-59.el7_9.1 curl: Case insensitive password comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8616

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8621 低危 7.29.0-59.el7_9.1 curl: curl_getdate out-of-bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8621

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 22:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8622 低危 7.29.0-59.el7_9.1 curl: URL unescape heap overflow via integer truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8622

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-07-31 21:29 修改: 2024-11-21 02:59

libcurl CVE-2016-8623 低危 7.29.0-59.el7_9.1 curl: Use-after-free via shared cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-8623

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-08-01 06:29 修改: 2024-11-21 02:59

libcurl CVE-2016-9586 低危 7.29.0-59.el7_9.1 curl: printf floating point buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9586

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-04-23 18:29 修改: 2024-11-21 03:01

libcurl CVE-2017-1000100 低危 7.29.0-59.el7_9.1 curl: TFTP sends more than buffer size

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000100

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-10-05 01:29 修改: 2026-05-13 00:24

libcurl CVE-2017-7407 低危 7.29.0-59.el7_9.1 curl: --write-out out of bounds read

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7407

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2017-04-03 20:59 修改: 2026-05-13 00:24

libcurl CVE-2018-20483 低危 7.29.0-59.el7_9.1 wget: Information exposure in set_file_metadata function in xattr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20483

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2018-12-26 18:29 修改: 2024-11-21 04:01

libcurl CVE-2020-8231 低危 7.29.0-59.el7_9.1 curl: Expired pointer dereference via multi API with CURLOPT_CONNECT_ONLY option set

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8231

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2020-12-14 20:15 修改: 2024-11-21 05:38

libcurl CVE-2021-22898 低危 7.29.0-59.el7_9.1 curl: TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22898

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-06-11 16:15 修改: 2026-04-16 14:16

libcurl CVE-2021-22925 低危 7.29.0-59.el7_9.1 curl: Incorrect fix for CVE-2021-22898 TELNET stack contents disclosure

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22925

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2021-08-05 21:15 修改: 2026-04-16 17:16

libcurl CVE-2022-27781 低危 7.29.0-59.el7_9.1 curl: CERTINFO never-ending busy-loop

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27781

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-06-02 14:15 修改: 2026-05-27 14:16

libcurl CVE-2022-35252 低危 7.29.0-59.el7_9.1 curl: Incorrect handling of control code characters in cookies

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35252

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2022-09-23 14:15 修改: 2025-05-05 17:18

libcurl CVE-2022-43552 低危 7.29.0-59.el7_9.1 7.29.0-59.el7_9.2 curl: Use-after-free triggered by an HTTP proxy deny response

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43552

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-02-09 20:15 修改: 2024-11-21 07:26

libcurl CVE-2023-27534 低危 7.29.0-59.el7_9.1 curl: SFTP path ~ resolving discrepancy

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27534

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-03-30 20:15 修改: 2025-04-23 17:16

libcurl CVE-2023-28322 低危 7.29.0-59.el7_9.1 curl: more POST-after-PUT confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28322

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-05-26 21:15 修改: 2026-02-13 20:16

libcurl CVE-2023-38546 低危 7.29.0-59.el7_9.1 curl: cookie injection with none file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38546

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-10-18 04:15 修改: 2026-05-12 11:16

libcurl CVE-2024-11053 低危 7.29.0-59.el7_9.1 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2024-12-11 08:15 修改: 2025-11-03 21:16

libcurl CVE-2024-7264 低危 7.29.0-59.el7_9.1 curl: libcurl: ASN.1 date parser overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2024-07-31 08:15 修改: 2025-11-03 23:17

libcurl CVE-2025-14524 低危 7.29.0-59.el7_9.1 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:53

libcurl CVE-2025-15079 低危 7.29.0-59.el7_9.1 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:50

libcurl CVE-2025-15224 低危 7.29.0-59.el7_9.1 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:47

libcurl CVE-2026-6276 低危 7.29.0-59.el7_9.1 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:21

curl CVE-2025-14524 低危 7.29.0-59.el7_9.1 curl: Information disclosure via cross-protocol redirect with OAuth2 bearer token

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14524

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:53

libdb CVE-2019-2708 低危 5.3.21-24.el7 libdb: Denial of service in the Data Store component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2708

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-04-23 19:32 修改: 2024-11-21 04:41

curl CVE-2025-15079 低危 7.29.0-59.el7_9.1 curl: Host verification bypass during SSH transfers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15079

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:50

libdb-utils CVE-2019-2708 低危 5.3.21-24.el7 libdb: Denial of service in the Data Store component

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-2708

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-04-23 19:32 修改: 2024-11-21 04:41

curl CVE-2025-15224 低危 7.29.0-59.el7_9.1 curl: libssh key passphrase bypass without agent set

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15224

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-01-08 10:15 修改: 2026-01-20 14:47

curl CVE-2026-6276 低危 7.29.0-59.el7_9.1 curl: libcurl: Information disclosure due to cookie leak when reusing connections with custom Host headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6276

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2026-05-13 13:01 修改: 2026-05-14 14:21

binutils CVE-2017-15939 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the concat_filename

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15939

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-27 21:29 修改: 2025-04-20 01:37

binutils CVE-2017-15996 低危 2.27-34.base.el7 binutils: Excessive memory allocation in elfcomm.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15996

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-29 17:29 修改: 2025-04-20 01:37

binutils CVE-2017-16826 低危 2.27-34.base.el7 binutils: Invalid memory access in the coff_slurp_line_table function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16826

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16827 低危 2.27-34.base.el7 binutils: Invalid free in the aout_get_external_symbols function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16827

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16828 低危 2.27-34.base.el7 binutils: Integer overflow in the display_debug_frames function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16828

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16829 低危 2.27-34.base.el7 binutils: Out-of-bounds read in the _bfd_elf_parse_gnu_properties function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16829

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16830 低危 2.27-34.base.el7 binutils: Segmentation fault in the print_gnu_property_note function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16830

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16831 低危 2.27-34.base.el7 binutils: Integer overflow in coffgen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16831

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-16832 低危 2.27-34.base.el7 binutils: Segmentation fault in the pe_bfd_read_buildid function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16832

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-15 08:29 修改: 2025-04-20 01:37

libgcc CVE-2015-5276 低危 4.8.5-36.el7 gcc: Predictable randomness from std::random_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30

libgcc CVE-2016-2226 低危 4.8.5-36.el7 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4487 低危 4.8.5-36.el7 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4488 低危 4.8.5-36.el7 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4489 低危 4.8.5-36.el7 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

python CVE-2018-1000030 低危 2.7.5-76.el7 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000030

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-08 17:29 修改: 2024-11-21 03:39

python CVE-2019-9674 低危 2.7.5-76.el7 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-02-04 15:15 修改: 2025-12-31 00:55

python CVE-2021-3737 低危 2.7.5-76.el7 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-04 19:15 修改: 2025-12-17 22:15

python CVE-2024-0397 低危 2.7.5-76.el7 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-17 16:15 修改: 2026-04-15 00:35

python CVE-2024-4032 低危 2.7.5-76.el7 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-17 15:15 修改: 2026-04-15 00:35

python CVE-2024-5642 低危 2.7.5-76.el7 python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-27 21:15 修改: 2026-04-15 00:35

python CVE-2024-7592 低危 2.7.5-76.el7 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-19 19:15 修改: 2025-11-03 23:17

python CVE-2025-1795 低危 2.7.5-76.el7 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-28 19:15 修改: 2026-04-15 00:35

python CVE-2025-6075 低危 2.7.5-76.el7 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-31 17:15 修改: 2026-02-04 19:05

python CVE-2026-2297 低危 2.7.5-76.el7 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-04 23:16 修改: 2026-05-01 16:16

python CVE-2026-3479 低危 2.7.5-76.el7 python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-18 19:16 修改: 2026-04-07 18:16

libgcc CVE-2016-4490 低危 4.8.5-36.el7 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4491 低危 4.8.5-36.el7 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4492 低危 4.8.5-36.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2016-4493 低危 4.8.5-36.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libgcc CVE-2018-20657 低危 4.8.5-36.el7 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

libgcc CVE-2019-14250 低危 4.8.5-36.el7 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

libgcc CVE-2021-3826 低危 4.8.5-36.el7 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

libgcc CVE-2021-46195 低危 4.8.5-36.el7 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-14 20:15 修改: 2024-11-21 06:33

libgcc CVE-2022-27943 低危 4.8.5-36.el7 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56

binutils CVE-2017-17080 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in bfd_getl32

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17080

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-11-30 21:29 修改: 2025-04-20 01:37

binutils CVE-2017-17121 低危 2.27-34.base.el7 binutils: Memory access violation via a crafted COFF binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17121

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

dbus CVE-2014-3636 低危 1:1.10.24-12.el7 dbus: denial of service by queuing or splitting file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3636

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-10-25 20:55 修改: 2026-05-06 22:30

dbus CVE-2014-3637 低危 1:1.10.24-12.el7 dbus: denial of service by creating unkillable D-Bus connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3637

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus CVE-2014-3638 低危 1:1.10.24-12.el7 dbus: denial of service in method call handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3638

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus CVE-2014-3639 低危 1:1.10.24-12.el7 dbus: denial of service flaw in incomplete connection handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3639

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus CVE-2015-0245 低危 1:1.10.24-12.el7 dbus: denial of service in dbus systemd activation

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0245

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-02-13 15:59 修改: 2026-05-06 22:30

libgcrypt CVE-2014-3591 低危 1.5.3-14.el7 libgcrypt: use ciphertext blinding for Elgamal decryption (new side-channel attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3591

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:08

libgcrypt CVE-2015-0837 低危 1.5.3-14.el7 libgcrypt: last-level cache side-channel attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0837

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-29 22:15 修改: 2024-11-21 02:23

libgcrypt CVE-2026-41990 低危 1.5.3-14.el7 Libgcrypt: Libgcrypt: Denial of Service or data integrity issues from missing bounds check during Dilithium signing.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41990

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-23 05:16 修改: 2026-04-27 18:33

libidn CVE-2015-2059 低危 1.28-4.el7 libidn: out-of-bounds read with stringprep on invalid UTF-8

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-2059

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-08-12 14:59 修改: 2026-05-06 22:30

libidn CVE-2015-8948 低危 1.28-4.el7 libidn: Out-of-bounds read due to use of fgets with fixed-size buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8948

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2016-6261 低危 1.28-4.el7 libidn: Out of bounds stack read in idna_to_ascii_4i

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6261

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2016-6262 低危 1.28-4.el7 libidn: Out-of-bounds read when reading zero byte as input

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6262

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2016-6263 低危 1.28-4.el7 libidn: Crash when given invalid UTF-8 data on input

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6263

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-07 20:59 修改: 2026-05-06 22:30

libidn CVE-2017-14062 低危 1.28-4.el7 libidn2: Integer overflow in puny_decode.c/decode_digit

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14062

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-31 16:29 修改: 2026-05-13 00:24

dbus CVE-2020-35512 低危 1:1.10.24-12.el7 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:27

binutils CVE-2017-17122 低危 2.27-34.base.el7 binutils: Excessive memory allocation in the dump_relocs_in_section function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17122

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-17123 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the coff_slurp_reloc_table function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17123

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-17124 低危 2.27-34.base.el7 binutils: Heap buffer overflow in the _bfd_coff_read_string_table function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17124

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-17125 低危 2.27-34.base.el7 binutils: Buffer over-read in the _bfd_elf_get_symbol_version_string function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17125

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

libmount CVE-2015-5218 低危 2.23.2-59.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

libmount CVE-2021-37600 低危 2.23.2-59.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

binutils CVE-2017-17126 低危 2.27-34.base.el7 binutils: Invalid memory access in the load_debug_section function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17126

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-12-04 08:29 修改: 2025-04-20 01:37

binutils CVE-2017-6969 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in readelf when processing corrupt RL78 binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6969

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-17 09:59 修改: 2026-05-13 00:24

binutils CVE-2017-7209 低危 2.27-34.base.el7 binutils: Null pointer dereference in dump_section_as_bytes function in readelf

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7209

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-21 06:59 修改: 2026-05-13 00:24

binutils CVE-2017-7210 低危 2.27-34.base.el7 binutils: Heap-based buffer over-reads in objdump

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7210

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-21 06:59 修改: 2026-05-13 00:24

binutils CVE-2017-7223 低危 2.27-34.base.el7 binutils: Global buffer overflow when attempting to unget EOF character

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7223

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

dbus-libs CVE-2014-3636 低危 1:1.10.24-12.el7 dbus: denial of service by queuing or splitting file descriptors

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3636

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-10-25 20:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3637 低危 1:1.10.24-12.el7 dbus: denial of service by creating unkillable D-Bus connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3637

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3638 低危 1:1.10.24-12.el7 dbus: denial of service in method call handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3638

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus-libs CVE-2014-3639 低危 1:1.10.24-12.el7 dbus: denial of service flaw in incomplete connection handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-3639

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2014-09-22 15:55 修改: 2026-05-06 22:30

dbus-libs CVE-2015-0245 低危 1:1.10.24-12.el7 dbus: denial of service in dbus systemd activation

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-0245

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-02-13 15:59 修改: 2026-05-06 22:30

dbus-libs CVE-2020-35512 低危 1:1.10.24-12.el7 dbus: users with the same numeric UID could lead to use-after-free and undefined behaviour

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35512

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-02-15 17:15 修改: 2024-11-21 05:27

device-mapper CVE-2020-8991 低危 7:1.02.149-8.el7 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-02-14 05:15 修改: 2024-11-21 05:39

device-mapper-libs CVE-2020-8991 低危 7:1.02.149-8.el7 lvm2: memory leak in vg_lookup in daemons/lvmetad/lvmetad-core.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8991

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-02-14 05:15 修改: 2024-11-21 05:39

binutils CVE-2017-7224 低危 2.27-34.base.el7 binutils: Invalid write in find_nearest_line function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7224

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

binutils CVE-2017-7225 低危 2.27-34.base.el7 binutils: Null pointer dereference and invalid write in find_nearest_line function in addr2line

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7225

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

libssh2 CVE-2023-6918 低危 1.8.0-4.el7 libssh: Missing checks for return values for digests

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6918

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2023-12-19 00:15 修改: 2025-02-15 01:15

libssh2 CVE-2025-4878 低危 1.8.0-4.el7 libssh: Use of uninitialized variable in privatekey_from_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4878

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2025-07-22 15:15 修改: 2026-05-19 14:16

libssh2 CVE-2025-8277 低危 1.8.0-4.el7 libssh: Memory Exhaustion via Repeated Key Exchange in libssh

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8277

镜像层: sha256:efcc668554b0c0ddb85489794696bc74b93e8253df5eba47cb81a33ae67182db

发布日期: 2025-09-09 12:15 修改: 2026-05-19 14:16

elfutils-default-yama-scope CVE-2016-10254 低危 0.172-2.el7 elfutils: Memory allocation failure in allocate_elf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10254

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2016-10255 低危 0.172-2.el7 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10255

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7607 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the handle_gnu_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7607

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7608 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7608

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7609 低危 0.172-2.el7 elfutils: Memory allocation failure in elf_compress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7609

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7610 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7610

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7611 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_symtab_shndx function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7611

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7612 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_sysv_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7612

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2017-7613 低危 0.172-2.el7 elfutils: elflint.c does not validate the number of sections and segments

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7613

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-default-yama-scope CVE-2018-16062 低危 0.172-2.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16062

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-29 03:29 修改: 2024-11-21 03:52

elfutils-default-yama-scope CVE-2018-16402 低危 0.172-2.el7 0.176-2.el7 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

libstdc++ CVE-2015-5276 低危 4.8.5-36.el7 gcc: Predictable randomness from std::random_device

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5276

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-17 15:59 修改: 2026-05-06 22:30

libstdc++ CVE-2016-2226 低危 4.8.5-36.el7 gcc: Exploitable buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2226

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

python-libs CVE-2018-1000030 低危 2.7.5-76.el7 python: Heap-Buffer-Overflow and Heap-Use-After-Free in Objects/fileobject.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000030

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-02-08 17:29 修改: 2024-11-21 03:39

python-libs CVE-2019-9674 低危 2.7.5-76.el7 python: Nested zip file (Zip bomb) vulnerability in Lib/zipfile.py

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9674

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-02-04 15:15 修改: 2025-12-31 00:55

python-libs CVE-2021-3737 低危 2.7.5-76.el7 python: urllib: HTTP client possible infinite loop on a 100 Continue response

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-04 19:15 修改: 2025-12-17 22:15

python-libs CVE-2024-0397 低危 2.7.5-76.el7 cpython: python: Memory race condition in ssl.SSLContext certificate store methods

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-17 16:15 修改: 2026-04-15 00:35

python-libs CVE-2024-4032 低危 2.7.5-76.el7 python: incorrect IPv4 and IPv6 private ranges

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-17 15:15 修改: 2026-04-15 00:35

python-libs CVE-2024-5642 低危 2.7.5-76.el7 python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-06-27 21:15 修改: 2026-04-15 00:35

python-libs CVE-2024-7592 低危 2.7.5-76.el7 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-19 19:15 修改: 2025-11-03 23:17

python-libs CVE-2025-1795 低危 2.7.5-76.el7 python: Mishandling of comma during folding and unicode-encoding of email headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1795

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-28 19:15 修改: 2026-04-15 00:35

python-libs CVE-2025-6075 低危 2.7.5-76.el7 python: Quadratic complexity in os.path.expandvars() with user-controlled template

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6075

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-10-31 17:15 修改: 2026-02-04 19:05

python-libs CVE-2026-2297 低危 2.7.5-76.el7 cpython: CPython: Logging Bypass in Legacy .pyc File Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2297

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-04 23:16 修改: 2026-05-01 16:16

python-libs CVE-2026-3479 低危 2.7.5-76.el7 python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3479

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-18 19:16 修改: 2026-04-07 18:16

readline CVE-2016-7091 低危 6.2-10.el7 sudo: Possible info leak via INPUTRC

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-7091

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-12-22 21:59 修改: 2026-05-06 22:30

libstdc++ CVE-2016-4487 低危 4.8.5-36.el7 gcc: Invalid write due to a use-after-free to array btypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4487

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4488 低危 4.8.5-36.el7 gcc: Invalid write due to a use-after-free to array ktypevec

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4488

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4489 低危 4.8.5-36.el7 gcc: Invalid write due to integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4489

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4490 低危 4.8.5-36.el7 gcc: Write access violation

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4490

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4491 低危 4.8.5-36.el7 gcc: Stack overflow due to infinite recursion in d_print_comp

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4491

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4492 低危 4.8.5-36.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4492

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2016-4493 低危 4.8.5-36.el7 gcc: Read access violations

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-4493

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-24 20:59 修改: 2026-05-13 00:24

libstdc++ CVE-2018-20657 低危 4.8.5-36.el7 libiberty: Memory leak in demangle_template function resulting in a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20657

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-02 14:29 修改: 2024-11-21 04:01

libstdc++ CVE-2019-14250 低危 4.8.5-36.el7 binutils: integer overflow in simple-object-elf.c leads to a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-14250

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-07-24 04:15 修改: 2024-11-21 04:26

rpm CVE-2021-20266 低危 4.11.3-35.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

libstdc++ CVE-2021-3826 低危 4.8.5-36.el7 libiberty: Heap/stack buffer overflow in the dlang_lname function in d-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3826

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-01 21:15 修改: 2024-11-21 06:22

libstdc++ CVE-2021-46195 低危 4.8.5-36.el7 gcc: uncontrolled recursion in libiberty/rust-demangle.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46195

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-14 20:15 修改: 2024-11-21 06:33

libstdc++ CVE-2022-27943 低危 4.8.5-36.el7 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56

elfutils-default-yama-scope CVE-2018-16403 低危 0.172-2.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-default-yama-scope CVE-2018-18310 低危 0.172-2.el7 0.176-2.el7 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18310

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-15 02:29 修改: 2024-11-21 03:55

elfutils-default-yama-scope CVE-2018-18520 低危 0.172-2.el7 0.176-2.el7 elfutils: eu-size cannot handle recursive ar files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18520

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-default-yama-scope CVE-2018-18521 低危 0.172-2.el7 0.176-2.el7 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18521

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

libtasn1 CVE-2017-10790 低危 4.10-1.el7 libtasn1: NULL pointer dereference in the _asn1_check_identifier function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10790

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-02 03:29 修改: 2026-05-13 00:24

libtasn1 CVE-2017-6891 低危 4.10-1.el7 libtasn1: Stack-based buffer overflow in asn1_find_node()

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6891

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-22 19:29 修改: 2026-05-13 00:24

rpm-build-libs CVE-2021-20266 低危 4.11.3-35.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

libtasn1 CVE-2018-1000654 低危 4.10-1.el7 libtasn1: Infinite loop in _asn1_expand_object_id(ptree) leads to memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000654

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-20 19:31 修改: 2024-11-21 03:40

libtasn1 CVE-2025-13151 低危 4.10-1.el7 libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-07 22:15 修改: 2026-02-02 19:27

elfutils-default-yama-scope CVE-2019-7149 低危 0.172-2.el7 0.176-2.el7 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7149

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-default-yama-scope CVE-2019-7150 低危 0.172-2.el7 0.176-2.el7 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7150

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-default-yama-scope CVE-2019-7664 低危 0.172-2.el7 0.176-2.el7 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7664

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-default-yama-scope CVE-2019-7665 低危 0.172-2.el7 0.176-2.el7 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7665

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-default-yama-scope CVE-2024-25260 低危 0.172-2.el7 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-20 18:15 修改: 2025-04-25 20:42

libuuid CVE-2015-5218 低危 2.23.2-59.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

libuuid CVE-2021-37600 低危 2.23.2-59.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

rpm-libs CVE-2021-20266 低危 4.11.3-35.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

binutils CVE-2017-7226 低危 2.27-34.base.el7 binutils: Heap-based buffer over-read in pe_ILF_object_p function in libbfd

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7226

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2016-10254 低危 0.172-2.el7 elfutils: Memory allocation failure in allocate_elf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10254

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2016-10255 低危 0.172-2.el7 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10255

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7607 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the handle_gnu_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7607

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7608 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7608

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7609 低危 0.172-2.el7 elfutils: Memory allocation failure in elf_compress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7609

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7610 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7610

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7611 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_symtab_shndx function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7611

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libelf CVE-2017-7612 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_sysv_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7612

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

rpm-python CVE-2021-20266 低危 4.11.3-35.el7 rpm: missing length checks in hdrblobInit()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20266

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-04-30 12:15 修改: 2024-11-21 05:46

elfutils-libelf CVE-2017-7613 低危 0.172-2.el7 elfutils: elflint.c does not validate the number of sections and segments

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7613

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

shadow-utils CVE-2023-4641 低危 2:4.1.5.1-25.el7 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-12-27 16:15 修改: 2025-11-03 20:16

shadow-utils CVE-2024-56433 低危 2:4.1.5.1-25.el7 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-12-26 09:15 修改: 2026-04-15 00:35

elfutils-libelf CVE-2018-16062 低危 0.172-2.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16062

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-29 03:29 修改: 2024-11-21 03:52

elfutils-libelf CVE-2018-16402 低危 0.172-2.el7 0.176-2.el7 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-libelf CVE-2018-16403 低危 0.172-2.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-libelf CVE-2018-18310 低危 0.172-2.el7 0.176-2.el7 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18310

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-15 02:29 修改: 2024-11-21 03:55

elfutils-libelf CVE-2018-18520 低危 0.172-2.el7 0.176-2.el7 elfutils: eu-size cannot handle recursive ar files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18520

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libelf CVE-2018-18521 低危 0.172-2.el7 0.176-2.el7 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18521

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libelf CVE-2019-7149 低危 0.172-2.el7 0.176-2.el7 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7149

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libelf CVE-2019-7150 低危 0.172-2.el7 0.176-2.el7 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7150

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libelf CVE-2019-7664 低危 0.172-2.el7 0.176-2.el7 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7664

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libelf CVE-2019-7665 低危 0.172-2.el7 0.176-2.el7 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7665

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libelf CVE-2024-25260 低危 0.172-2.el7 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-20 18:15 修改: 2025-04-25 20:42

binutils CVE-2017-7227 低危 2.27-34.base.el7 binutils: Heap-based buffer overflow in ld due to missing null termination

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7227

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-22 16:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2016-10254 低危 0.172-2.el7 elfutils: Memory allocation failure in allocate_elf

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10254

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2016-10255 低危 0.172-2.el7 elfutils: Memory allocation failure in __libelf_set_rawdata_wrlock (elf_getdata.c)

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-10255

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-23 16:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7607 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the handle_gnu_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7607

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7608 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the ebl_object_note_type_name function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7608

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7609 低危 0.172-2.el7 elfutils: Memory allocation failure in elf_compress.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7609

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7610 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_group function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7610

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7611 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_symtab_shndx function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7611

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7612 低危 0.172-2.el7 elfutils: Heap-buffer overflow in the check_sysv_hash function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7612

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2017-7613 低危 0.172-2.el7 elfutils: elflint.c does not validate the number of sections and segments

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7613

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

elfutils-libs CVE-2018-16062 低危 0.172-2.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getaranges.c:dwarf_getaranges() via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16062

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-29 03:29 修改: 2024-11-21 03:52

sqlite CVE-2016-6153 低危 3.7.17-8.el7 sqlite: Tempdir selection vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6153

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-09-26 16:59 修改: 2026-05-06 22:30

sqlite CVE-2017-10989 低危 3.7.17-8.el7 sqlite: Heap-buffer overflow in the getNodeSize function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-10989

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-07 12:29 修改: 2026-05-13 00:24

sqlite CVE-2017-13685 低危 3.7.17-8.el7 sqlite: Local DoS via dump_callback function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13685

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-08-29 06:29 修改: 2026-05-13 00:24

sqlite CVE-2017-15286 低危 3.7.17-8.el7 sqlite: NULL pointer dereference in tableColumnList

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-15286

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-12 08:29 修改: 2025-04-20 01:37

sqlite CVE-2018-8740 低危 3.7.17-8.el7 sqlite: NULL pointer dereference with databases with schema corrupted with CREATE TABLE AS allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-8740

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-03-17 00:29 修改: 2024-11-21 04:14

sqlite CVE-2019-19244 低危 3.7.17-8.el7 sqlite: allows a crash if a sub-select uses both DISTINCT and window functions and also has certain ORDER BY usage

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-19244

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-11-25 20:15 修改: 2024-11-21 04:34

sqlite CVE-2020-35525 低危 3.7.17-8.el7 sqlite: Null pointer derreference in src/select.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-35525

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-01 18:15 修改: 2024-11-21 05:27

sqlite CVE-2021-45346 低危 3.7.17-8.el7 sqlite: crafted SQL query allows a malicious user to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-02-14 19:15 修改: 2024-11-21 06:32

sqlite CVE-2024-0232 低危 3.7.17-8.el7 sqlite: use-after-free bug in jsonParseAddNodeArray

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0232

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-01-16 14:15 修改: 2024-11-21 08:46

sqlite CVE-2025-70873 低危 3.7.17-8.el7 sqlite: SQLite: Information Disclosure via Crafted ZIP File

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-70873

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-03-12 19:16 修改: 2026-04-16 21:15

elfutils-libs CVE-2018-16402 低危 0.172-2.el7 0.176-2.el7 elfutils: Double-free due to double decompression of sections in crafted ELF causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16402

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-libs CVE-2018-16403 低危 0.172-2.el7 0.176-2.el7 elfutils: Heap-based buffer over-read in libdw/dwarf_getabbrev.c and libwd/dwarf_hasattr.c causes crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16403

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-03 19:29 修改: 2024-11-21 03:52

elfutils-libs CVE-2018-18310 低危 0.172-2.el7 0.176-2.el7 elfutils: invalid memory address dereference was discovered in dwfl_segment_report_module.c in libdwfl

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18310

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-15 02:29 修改: 2024-11-21 03:55

elfutils-libs CVE-2018-18520 低危 0.172-2.el7 0.176-2.el7 elfutils: eu-size cannot handle recursive ar files

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18520

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libs CVE-2018-18521 低危 0.172-2.el7 0.176-2.el7 elfutils: Divide-by-zero in arlib_add_symbols function in arlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18521

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-19 17:29 修改: 2024-11-21 03:56

elfutils-libs CVE-2019-7149 低危 0.172-2.el7 0.176-2.el7 elfutils: heap-based buffer over-read in read_srclines in dwarf_getsrclines.c in libdw

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7149

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libs CVE-2019-7150 低危 0.172-2.el7 0.176-2.el7 elfutils: segmentation fault in elf64_xlatetom in libelf/elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7150

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-29 00:29 修改: 2024-11-21 04:47

elfutils-libs CVE-2019-7664 低危 0.172-2.el7 0.176-2.el7 elfutils: out of bound write in elf_cvt_note in libelf/note_xlate.h

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7664

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libs CVE-2019-7665 低危 0.172-2.el7 0.176-2.el7 elfutils: heap-based buffer over-read in function elf32_xlatetom in elf32_xlatetom.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-7665

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-02-09 16:29 修改: 2024-11-21 04:48

elfutils-libs CVE-2024-25260 低危 0.172-2.el7 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-20 18:15 修改: 2025-04-25 20:42

binutils CVE-2017-7299 低危 2.27-34.base.el7 binutils: Out-of-bounds read in bfd_elf_final_link function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7299

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7300 低危 2.27-34.base.el7 binutils: Heap-buffer overflow in aout_link_add_symbols function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7300

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7301 低危 2.27-34.base.el7 binutils: Off-by-one error in aout_link_add_symbols function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7301

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

libxml2 CVE-2017-18258 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Unrestricted memory usage in xz_head() function in xzlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18258

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-04-08 17:29 修改: 2024-11-21 03:19

libxml2 CVE-2017-5969 低危 2.9.1-6.el7_2.3 libxml2: Null pointer dereference in xmlSaveDoc implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5969

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2 CVE-2017-8872 低危 2.9.1-6.el7_2.3 libxml2: Out-of-bounds read in htmlParseTryOrFinish

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8872

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-10 05:29 修改: 2026-05-13 00:24

libxml2 CVE-2017-9048 低危 2.9.1-6.el7_2.3 libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9048

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2 CVE-2018-14567 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Infinite loop caused by incorrect error detection during LZMA decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14567

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-16 20:29 修改: 2024-11-21 03:49

libxml2 CVE-2023-45322 低危 2.9.1-6.el7_2.3 libxml2: use-after-free in xmlUnlinkNode() in tree.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-10-06 22:15 修改: 2025-11-03 21:16

libxml2 CVE-2024-34459 低危 2.9.1-6.el7_2.3 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-14 15:39 修改: 2025-11-04 22:16

libxml2 CVE-2025-27113 低危 2.9.1-6.el7_2.3 libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27113

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

systemd CVE-2016-6349 低危 219-62.el7 oci-register-machine: information exposure for docker containers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6349

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 20:59 修改: 2026-05-13 00:24

systemd CVE-2018-16888 低危 219-62.el7 219-67.el7 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-14 22:29 修改: 2024-11-21 03:53

systemd CVE-2019-20386 低危 219-62.el7 219-78.el7 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-21 06:15 修改: 2025-06-09 16:15

systemd CVE-2019-3815 低危 219-62.el7 219-62.el7_6.3 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-28 15:29 修改: 2024-11-21 04:42

libxml2 CVE-2025-6170 低危 2.9.1-6.el7_2.3 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2 CVE-2026-0989 低危 2.9.1-6.el7_2.3 libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2 CVE-2026-0992 低危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XML catalogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

binutils CVE-2017-7302 低危 2.27-34.base.el7 binutils: Out-of-bounds read in wap_std_reloc_out function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7302

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7303 低危 2.27-34.base.el7 binutils: Out-of-bounds read in find_link function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7303

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7304 低危 2.27-34.base.el7 binutils: Out-of-bounds read in copy_special_section_fields function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7304

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 15:59 修改: 2026-05-13 00:24

binutils CVE-2017-7614 低危 2.27-34.base.el7 binutils: NULL pointer dereference in bfd_elf_final_link function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7614

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-09 14:59 修改: 2026-05-13 00:24

binutils CVE-2017-8392 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the _bfd_dwarf2_find_nearest_line function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8392

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8393 低危 2.27-34.base.el7 binutils: Out-of-bounds read due to wrong assumption for objcopy and strip

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8393

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8394 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the _bfd_elf_large_com_section

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8394

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8395 低危 2.27-34.base.el7 binutils: Out-of-bounds write in the _bfd_generic_get_section_contents function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8395

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8396 低危 2.27-34.base.el7 binutils: Out-of-bounds read in the existing reloc offset range tests

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8396

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8397 低危 2.27-34.base.el7 binutils: Out-of-bounds read and write while processing binary containing reloc(s) with negative addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8397

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8398 低危 2.27-34.base.el7 binutils: Out-of-bounds read while dumping the debug information from a corrupt binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8398

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-01 18:59 修改: 2026-05-13 00:24

binutils CVE-2017-8421 低危 2.27-34.base.el7 binutils: Memory exhaustion in objdump via a crafted PE file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8421

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-02 17:59 修改: 2026-05-13 00:24

binutils CVE-2017-9038 低危 2.27-34.base.el7 binutils: Heap-buffer overflow in the byte_get_little_endian

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9038

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9039 低危 2.27-34.base.el7 binutils: Memory consumption via many program headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9039

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9040 低危 2.27-34.base.el7 binutils: NULL pointer dereference in the process_mips_specific_function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9040

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9041 低危 2.27-34.base.el7 binutils: Heap buffer overflow in the process_mips_specific function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9041

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9042 低危 2.27-34.base.el7 binutils: Invalid variable type in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9042

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9043 低危 2.27-34.base.el7 binutils: Shift exponent too large for type unsigned long in readelf.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9043

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

systemd-libs CVE-2016-6349 低危 219-62.el7 oci-register-machine: information exposure for docker containers

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-6349

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-03-29 20:59 修改: 2026-05-13 00:24

systemd-libs CVE-2018-16888 低危 219-62.el7 219-67.el7 systemd: kills privileged process if unprivileged PIDFile was tampered

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-16888

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-14 22:29 修改: 2024-11-21 03:53

systemd-libs CVE-2019-20386 低危 219-62.el7 219-78.el7 systemd: memory leak in button_open() in login/logind-button.c when udev events are received

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20386

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2020-01-21 06:15 修改: 2025-06-09 16:15

systemd-libs CVE-2019-3815 低危 219-62.el7 219-62.el7_6.3 systemd: memory leak in journald-server.c introduced by fix for CVE-2018-16864

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-3815

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-01-28 15:29 修改: 2024-11-21 04:42

binutils CVE-2017-9044 低危 2.27-34.base.el7 binutils: Out-of-bounds read in the print_symbol_for_build_attribute function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9044

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 01:29 修改: 2026-05-13 00:24

binutils CVE-2017-9742 低危 2.27-34.base.el7 binutils: Global buffer over-read in print_insn_score16 function while disassembling corrupt score binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9742

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9743 低危 2.27-34.base.el7 binutils: Global buffer over-read in print_insn_score32 function while disassembling corrupt score binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9743

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9744 低危 2.27-34.base.el7 binutils: Address violation in sh_elf_set_mach_from_flags function when disassembling a corrupt SH binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9744

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9745 低危 2.27-34.base.el7 binutils: Heap buffer over-read in _bfd_vms_slurp_etir function when handling VMS alpha binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9745

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9746 低危 2.27-34.base.el7 binutils: Heap buffer over-read in disassemble_bytes function when disassembling a corrupt binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9746

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9747 低危 2.27-34.base.el7 binutils: Stack-based buffer over-read in ieee_archive_p function while disassembling corrupt IEEE binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9747

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

tar CVE-2018-20482 低危 2:1.26-35.el7 tar: Infinite read loop in sparse_dump_region function in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20482

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-12-26 18:29 修改: 2024-11-21 04:01

tar CVE-2019-9923 低危 2:1.26-35.el7 tar: null-pointer dereference in pax_decode_header in sparse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9923

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-03-22 08:29 修改: 2025-08-06 22:15

tar CVE-2021-20193 低危 2:1.26-35.el7 tar: Memory leak in read_header() in list.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-20193

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-03-26 17:15 修改: 2025-05-05 14:15

tar CVE-2023-39804 低危 2:1.26-35.el7 tar: Incorrectly handled extension attributes in PAX archives can lead to a crash

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-03-27 04:15 修改: 2025-11-04 19:15

binutils CVE-2017-9748 低危 2.27-34.base.el7 binutils: Stack-based buffer over-read in ieee_object_p function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9748

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9749 低危 2.27-34.base.el7 binutils: Global buffer over-read in *regs* macros when disassembling corrupt bfin binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9749

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9750 低危 2.27-34.base.el7 binutils: Global buffer over-read in opcodes/rx-decode.opc when disassembling a corrupt RX binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9750

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9751 低危 2.27-34.base.el7 binutils: Stack-based buffer over-read in opcodes/rl78-decode.opc when disassembling a corrupt RL78 binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9751

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9752 低危 2.27-34.base.el7 binutils: Heap buffer over-read in f_bfd_vms_get_value function when processing a corrupt Alpha VMA binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9752

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

util-linux CVE-2015-5218 低危 2.23.2-59.el7 colcrt: global-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-5218

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-11-09 16:59 修改: 2026-05-06 22:30

util-linux CVE-2021-37600 低危 2.23.2-59.el7 util-linux: integer overflow can lead to buffer overflow in get_sem_elements() in sys-utils/ipcutils.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37600

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-07-30 14:15 修改: 2024-11-21 06:15

binutils CVE-2017-9753 低危 2.27-34.base.el7 binutils: Address violation in versados_mkobject function when disassembling a corrupt versados binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9753

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

expat CVE-2016-9063 低危 2.1.0-10.el7_3 firefox: Possible integer overflow to fix inside XML_Parse in Expat

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9063

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-11 21:29 修改: 2024-11-21 03:00

expat CVE-2019-15903 低危 2.1.0-10.el7_3 2.1.0-12.el7 expat: heap-based buffer over-read via crafted XML input

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-15903

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2019-09-04 06:15 修改: 2025-05-30 20:15

expat CVE-2025-66382 低危 2.1.0-10.el7_3 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-11-28 07:15 修改: 2026-06-02 14:16

expat CVE-2026-24515 低危 2.1.0-10.el7_3 libexpat: libexpat null pointer dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24515

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-23 08:16 修改: 2026-06-02 14:16

expat CVE-2026-41080 低危 2.1.0-10.el7_3 libexpat: expat: libexpat: Denial of Service via hash flooding with crafted XML

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41080

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-04-16 17:16 修改: 2026-04-27 07:16

file-libs CVE-2014-9620 低危 5.11-35.el7 file: limit the number of ELF notes processed

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-9620

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2015-01-21 18:59 修改: 2026-05-06 22:30

file-libs CVE-2015-8865 低危 5.11-35.el7 file: Buffer over-write in finfo_open with malformed magic file

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-8865

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2016-05-20 10:59 修改: 2026-05-06 22:30

file-libs CVE-2018-10360 低危 5.11-35.el7 5.11-36.el7 file: out-of-bounds read via a crafted ELF file

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10360

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-11 10:29 修改: 2024-11-21 03:41

file-libs CVE-2022-48554 低危 5.11-35.el7 file: stack-based buffer over-read in file_copystr in funcs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48554

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-22 19:16 修改: 2024-11-21 07:33

gawk CVE-2023-4156 低危 4.0.2-4.el7_3.1 gawk: heap out of bound read in builtin.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4156

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-09-25 18:15 修改: 2024-11-21 08:34

binutils CVE-2017-9754 低危 2.27-34.base.el7 binutils: Stack-based buffer over-read in process_otr function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9754

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9755 低危 2.27-34.base.el7 binutils: Global buffer over-read in opcodes/i386-dis.c while checking invalid registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9755

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9756 低危 2.27-34.base.el7 binutils: Address violation in aarch64_ext_ldst_reglist function when disassembling corrupt aarch64 binary

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9756

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-19 04:29 修改: 2026-05-13 00:24

binutils CVE-2017-9954 低危 2.27-34.base.el7 binutils: stack-based buffer over-read in getvalue function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9954

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-26 23:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-18258 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Unrestricted memory usage in xz_head() function in xzlib.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18258

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-04-08 17:29 修改: 2024-11-21 03:19

libxml2-python CVE-2017-5969 低危 2.9.1-6.el7_2.3 libxml2: Null pointer dereference in xmlSaveDoc implementation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5969

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-04-11 16:59 修改: 2026-05-13 00:24

libxml2-python CVE-2017-8872 低危 2.9.1-6.el7_2.3 libxml2: Out-of-bounds read in htmlParseTryOrFinish

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-8872

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-10 05:29 修改: 2026-05-13 00:24

libxml2-python CVE-2017-9048 低危 2.9.1-6.el7_2.3 libxml2: Stack-based buffer overflow in function xmlSnprintfElementContent

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9048

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-18 06:29 修改: 2026-05-13 00:24

libxml2-python CVE-2018-14567 低危 2.9.1-6.el7_2.3 2.9.1-6.el7.4 libxml2: Infinite loop caused by incorrect error detection during LZMA decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-14567

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-08-16 20:29 修改: 2024-11-21 03:49

libxml2-python CVE-2023-45322 低危 2.9.1-6.el7_2.3 libxml2: use-after-free in xmlUnlinkNode() in tree.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-10-06 22:15 修改: 2025-11-03 21:16

libxml2-python CVE-2024-34459 低危 2.9.1-6.el7_2.3 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-05-14 15:39 修改: 2025-11-04 22:16

libxml2-python CVE-2025-27113 低危 2.9.1-6.el7_2.3 libxml2: NULL Pointer Dereference in libxml2 xmlPatMatch

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27113

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-18 23:15 修改: 2025-11-03 22:18

libxml2-python CVE-2025-6170 低危 2.9.1-6.el7_2.3 libxml2: Stack Buffer Overflow in xmllint Interactive Shell Command Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6170

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-06-16 16:15 修改: 2026-06-02 14:16

libxml2-python CVE-2026-0989 低危 2.9.1-6.el7_2.3 libxml2: Unbounded RelaxNG Include Recursion Leading to Stack Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0989

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

libxml2-python CVE-2026-0992 低危 2.9.1-6.el7_2.3 libxml2: libxml2: Denial of Service via crafted XML catalogs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0992

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-01-15 15:15 修改: 2026-04-22 10:16

binutils CVE-2017-9955 低危 2.27-34.base.el7 binutils: heap buffer over-read in get_build_id function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9955

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-06-26 23:29 修改: 2026-05-13 00:24

binutils CVE-2018-12641 低危 2.27-34.base.el7 2.27-41.base.el7 binutils: Stack Exhaustion in the demangling functions provided by libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12641

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-22 12:29 修改: 2024-11-21 03:45

binutils CVE-2018-12697 低危 2.27-34.base.el7 2.27-41.base.el7 binutils: NULL pointer dereference in work_stuff_copy_to_from in cplus-dem.c.

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12697

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-23 23:29 修改: 2024-11-21 03:45

binutils CVE-2018-12698 低危 2.27-34.base.el7 binutils: excessive memory consumption in demangle_template in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12698

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-23 23:29 修改: 2024-11-21 03:45

binutils CVE-2018-12699 低危 2.27-34.base.el7 binutils: heap-based buffer overflow in finish_stab in stabs.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12699

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-23 23:29 修改: 2024-11-21 03:45

vim-minimal CVE-2017-1000382 低危 2:7.4.160-5.el7 vim: Ignores umask when creating a swap file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-1000382

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-10-31 20:29 修改: 2025-04-20 01:37

vim-minimal CVE-2017-11109 低危 2:7.4.160-5.el7 vim: Use-after-free via crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11109

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

vim-minimal CVE-2017-17087 低危 2:7.4.160-5.el7 vim: Sets the group ownership of a .swp file to the editor's primary group

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17087

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-12-01 08:29 修改: 2025-04-20 01:37

vim-minimal CVE-2017-5953 低危 2:7.4.160-5.el7 vim: Tree length values not validated properly when handling a spell file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5953

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-10 07:59 修改: 2026-05-13 00:24

vim-minimal CVE-2017-6350 低危 2:7.4.160-5.el7 vim: Integer overflow at an unserialize_uep memory allocation site

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-6350

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-02-27 07:59 修改: 2026-05-13 00:24

vim-minimal CVE-2021-3236 低危 2:7.4.160-5.el7 vim: NULL pointer dereference in ex_buffer_all method

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3236

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-08-11 14:15 修改: 2024-11-21 06:21

vim-minimal CVE-2021-3903 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3903

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-10-27 21:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3927 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow in gchar_cursor() in misc1.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3927

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-05 15:15 修改: 2024-11-21 06:22

vim-minimal CVE-2021-3974 低危 2:7.4.160-5.el7 vim: Use after free in regexp_nfa.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3974

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-11-19 11:15 修改: 2024-11-21 06:23

vim-minimal CVE-2021-4069 低危 2:7.4.160-5.el7 vim: use-after-free in ex_open() in src/ex_docmd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4069

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-06 12:15 修改: 2024-11-21 06:36

vim-minimal CVE-2021-4166 低危 2:7.4.160-5.el7 vim: out-of-bounds read in do_arg_all() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4166

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2021-12-25 19:15 修改: 2024-11-21 06:37

vim-minimal CVE-2022-0351 低危 2:7.4.160-5.el7 vim: access of memory location before start of buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0351

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-01-25 18:15 修改: 2025-11-03 21:15

vim-minimal CVE-2022-1154 低危 2:7.4.160-5.el7 vim: use after free in utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1154

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-03-30 12:15 修改: 2024-11-21 06:40

vim-minimal CVE-2022-1619 低危 2:7.4.160-5.el7 vim: heap-buffer-overflow in cmdline_erase_chars of ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1619

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-05-08 10:15 修改: 2024-11-21 06:41

vim-minimal CVE-2022-1720 低危 2:7.4.160-5.el7 vim: buffer over-read in grab_file_name() in findfile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1720

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-20 15:15 修改: 2024-11-21 06:41

vim-minimal CVE-2022-2124 低危 2:7.4.160-5.el7 vim: out of bounds read in current_quote()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2124

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-19 10:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2125 低危 2:7.4.160-5.el7 vim: Heap-based Buffer Overflow in get_lisp_indent()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2125

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-19 12:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2126 低危 2:7.4.160-5.el7 vim: out of bounds read in suggest_trie_walk()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2126

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-19 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2129 低危 2:7.4.160-5.el7 vim: out of bounds write in vim_regsub_both()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2129

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-19 19:15 修改: 2025-11-03 21:15

vim-minimal CVE-2022-2175 低危 2:7.4.160-5.el7 vim: buffer over-read in put_on_cmdline() at ex_getln.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2175

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-23 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2182 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow through parse_cmd_address() in function utf_ptr2char

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2182

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-23 18:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2183 低危 2:7.4.160-5.el7 vim: out-of-bounds read through get_lisp_indent() in function get_lisp_indent

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2183

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-23 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2206 低危 2:7.4.160-5.el7 vim: out-of-bound read in function msg_outtrans_attr

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2206

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-26 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2207 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow in function ins_bs

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2207

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-27 12:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2208 低危 2:7.4.160-5.el7 vim: null pointer dereference in function diff_check

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2208

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-27 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2210 低危 2:7.4.160-5.el7 vim: out-of-bound write in function ml_append_int

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2210

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-27 16:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2231 低危 2:7.4.160-5.el7 vim: null pointer derefernce in function skipwhite may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2231

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-06-28 20:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2284 低危 2:7.4.160-5.el7 vim: out of bounds read in utfc_ptr2len() at mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2284

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-02 15:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2285 低危 2:7.4.160-5.el7 vim: integer overflow in del_typebuf() at getchar.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2285

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-02 16:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2286 低危 2:7.4.160-5.el7 vim: out of bounds read in ins_bytes() at change.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2286

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-02 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2287 低危 2:7.4.160-5.el7 vim: out of bounds read in suggest_trie_walk() at spellsuggest.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2287

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-02 22:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2288 低危 2:7.4.160-5.el7 vim: out of bounds write in parse_command_modifiers() at ex_docmd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2288

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-03 13:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2289 低危 2:7.4.160-5.el7 vim: use after free in ex_diffgetput() at diff.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2289

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-03 15:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2343 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2343

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-08 18:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2344 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow in ins_compl_add() in insexpand.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2344

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-08 19:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2345 低危 2:7.4.160-5.el7 vim: use-after-free in skipwhite() in charset.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2345

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-07-08 22:15 修改: 2024-11-21 07:00

vim-minimal CVE-2022-2571 低危 2:7.4.160-5.el7 vim: Heap-based Buffer Overflow in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2571

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-01 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2580 低危 2:7.4.160-5.el7 vim: Out-of-bounds Read in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2580

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-01 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2581 低危 2:7.4.160-5.el7 vim: Out-of-bounds Read in vim src/regexp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2581

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-01 15:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2598 低危 2:7.4.160-5.el7 vim: Undefined Behavior for Input to API in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2598

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-01 15:15 修改: 2026-02-25 15:18

vim-minimal CVE-2022-2816 低危 2:7.4.160-5.el7 vim: out-of-bounds read in check_vim9_unlet() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2816

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-15 22:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2817 低危 2:7.4.160-5.el7 vim: heap use-after-free in string_quote() at src/strings.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2817

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-15 23:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2819 低危 2:7.4.160-5.el7 vim: heap buffer overflow in compile_lock_unlock() at src/vim9cmds.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2819

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-15 11:21 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2845 低危 2:7.4.160-5.el7 vim: Buffer Under-read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2845

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-17 15:15 修改: 2026-02-25 15:19

vim-minimal CVE-2022-2849 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow in latin_ptr2len() at src/mbyte.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2849

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-17 18:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2862 低危 2:7.4.160-5.el7 vim: heap use-after-free in generate_PCALL() at src/vim9instr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2862

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-17 20:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2874 低危 2:7.4.160-5.el7 vim: NULL pointer dereference in generate_loadvar() in vim9compile.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2874

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-18 16:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2889 低危 2:7.4.160-5.el7 vim: use-after-free in find_var_also_in_script() in evalvars.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2889

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-19 13:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2923 低危 2:7.4.160-5.el7 vim: null pointer dereference in function sug_filltree

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2923

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-22 21:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2946 低危 2:7.4.160-5.el7 vim: use after free in function vim_vsnprintf_typval

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2946

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-23 17:15 修改: 2024-11-21 07:01

vim-minimal CVE-2022-2980 低危 2:7.4.160-5.el7 vim: null pointer dereference in do_mouse() at src/mouse.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2980

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-25 20:15 修改: 2024-11-21 07:02

vim-minimal CVE-2022-3037 低危 2:7.4.160-5.el7 vim: use after free in function qf_buf_add_line( )

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3037

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-08-30 21:15 修改: 2024-11-21 07:18

vim-minimal CVE-2022-3153 低危 2:7.4.160-5.el7 vim: null pointer dereference in vim_regcomp()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3153

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-08 15:15 修改: 2024-11-21 07:18

vim-minimal CVE-2022-3234 低危 2:7.4.160-5.el7 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3234

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-17 22:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3235 低危 2:7.4.160-5.el7 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3235

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-18 20:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3256 低危 2:7.4.160-5.el7 vim: use-after-free in movemark() at mark.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3256

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-22 13:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3296 低危 2:7.4.160-5.el7 vim: stack buffer overflow in ex_finally() in ex_eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3296

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-25 17:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3352 低危 2:7.4.160-5.el7 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3352

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-09-29 12:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3520 低危 2:7.4.160-5.el7 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3520

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-12-02 19:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3591 低危 2:7.4.160-5.el7 vim: Use After Free

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3591

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-12-02 17:15 修改: 2024-11-21 07:19

vim-minimal CVE-2022-3705 低危 2:7.4.160-5.el7 vim: a use after free in the function qf_update_buffer

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3705

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-10-26 20:15 修改: 2024-11-21 07:20

vim-minimal CVE-2022-4292 低危 2:7.4.160-5.el7 vim: use-after-free in did_set_spelllang() in src/spell.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4292

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2022-12-05 19:15 修改: 2024-11-21 07:34

vim-minimal CVE-2023-0049 低危 2:7.4.160-5.el7 vim: out-of-bounds read in function build_stl_str_hl

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0049

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-04 16:15 修改: 2025-01-17 20:15

vim-minimal CVE-2023-0051 低危 2:7.4.160-5.el7 vim: heap-based buffer overflow in msg_puts_printf() in message.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0051

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-04 18:15 修改: 2024-11-21 07:36

vim-minimal CVE-2023-0054 低危 2:7.4.160-5.el7 vim: out-of-bounds write in do_string_sub() in eval.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0054

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-04 19:15 修改: 2025-11-03 21:15

vim-minimal CVE-2023-0288 低危 2:7.4.160-5.el7 vim: a heap-based buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0288

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-13 16:15 修改: 2024-11-21 07:36

vim-minimal CVE-2023-0433 低危 2:7.4.160-5.el7 vim: reading past the end of a line when formatting text

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0433

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-21 15:15 修改: 2024-11-21 07:37

vim-minimal CVE-2023-0512 低危 2:7.4.160-5.el7 vim: divide by zero in adjust_skipcol() at move.ca

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0512

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-01-30 16:15 修改: 2024-11-21 07:37

vim-minimal CVE-2023-1127 低危 2:7.4.160-5.el7 vim: Divide By Zero in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1127

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-01 19:15 修改: 2024-11-21 07:38

vim-minimal CVE-2023-1170 低危 2:7.4.160-5.el7 vim: Heap-based Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1170

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-03 23:15 修改: 2024-11-21 07:38

vim-minimal CVE-2023-1175 低危 2:7.4.160-5.el7 vim: Incorrect Calculation of Buffer Size

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1175

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-04 16:15 修改: 2025-11-03 21:15

vim-minimal CVE-2023-1264 低危 2:7.4.160-5.el7 vim: NULL pointer dereference issue in utfc_ptr2len

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1264

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-03-07 22:15 修改: 2024-11-21 07:38

vim-minimal CVE-2023-2609 低危 2:7.4.160-5.el7 vim: NULL Pointer Dereference in get_register() at register.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2609

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-05-09 18:15 修改: 2024-11-21 07:58

vim-minimal CVE-2023-2610 低危 2:7.4.160-5.el7 vim: integer overflow vulnerability in vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2610

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-05-09 22:15 修改: 2025-11-03 21:15

vim-minimal CVE-2023-46246 低危 2:7.4.160-5.el7 vim: Integer Overflow in :history command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46246

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-10-27 19:15 修改: 2025-02-13 18:15

vim-minimal CVE-2023-48231 低危 2:7.4.160-5.el7 vim: use after free in win_close()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48231

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48232 低危 2:7.4.160-5.el7 vim: floating point exception in adjust_plines_for_skipcol()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48232

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48233 低危 2:7.4.160-5.el7 vim: overflow with count for :s command

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48233

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48234 低危 2:7.4.160-5.el7 vim: overflow in nv_z_get_count

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48234

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48235 低危 2:7.4.160-5.el7 vim: overflow in ex address parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48235

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48236 低危 2:7.4.160-5.el7 vim: overflow in get_number

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48236

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48237 低危 2:7.4.160-5.el7 vim: buffer overflow in shift_line

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48237

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-16 23:15 修改: 2024-11-21 08:31

vim-minimal CVE-2023-48706 低危 2:7.4.160-5.el7 vim: use-after-free in ex_substitute in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48706

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-11-22 22:15 修改: 2024-11-21 08:32

vim-minimal CVE-2023-5344 低危 2:7.4.160-5.el7 vim: Heap-based Buffer Overflow in trunc_string()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5344

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-10-02 20:15 修改: 2025-11-03 21:16

vim-minimal CVE-2023-5441 低危 2:7.4.160-5.el7 vim: NULL pointer dereference in screen_line() in src/screen.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5441

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-10-05 21:15 修改: 2024-11-21 08:41

vim-minimal CVE-2023-5535 低危 2:7.4.160-5.el7 vim: use after free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5535

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2023-10-11 20:15 修改: 2024-11-21 08:41

vim-minimal CVE-2024-22667 低危 2:7.4.160-5.el7 vim: Stack buffer over flow in did_set_langmap function in map.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22667

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-02-05 08:15 修改: 2025-11-04 22:15

vim-minimal CVE-2024-41965 低危 2:7.4.160-5.el7 vim: Double-Free Vulnerability in Vim Could Cause Application Crashes

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41965

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-01 22:15 修改: 2024-11-21 09:33

vim-minimal CVE-2024-43374 低危 2:7.4.160-5.el7 vim: use-after-free in alist_add() in src/arglist.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43374

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-16 02:15 修改: 2025-08-25 13:51

vim-minimal CVE-2024-43802 低危 2:7.4.160-5.el7 vim: Heap Buffer Overflow in Vim's Typeahead Buffer Handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-43802

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-08-26 19:15 修改: 2026-04-15 00:35

vim-minimal CVE-2024-45306 低危 2:7.4.160-5.el7 vim: heap-buffer-overflow in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45306

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-09-02 18:15 修改: 2024-11-21 09:37

vim-minimal CVE-2024-47814 低危 2:7.4.160-5.el7 vim: use-after-free when closing buffers in Vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47814

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2024-10-07 22:15 修改: 2025-11-03 21:16

vim-minimal CVE-2025-1215 低危 2:7.4.160-5.el7 vim: vim main.c memory corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1215

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-12 19:15 修改: 2025-08-13 17:28

vim-minimal CVE-2025-22134 低危 2:7.4.160-5.el7 vim: heap-buffer-overflow with visual mode in Vim < 9.1.1003

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22134

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-13 21:15 修改: 2025-08-14 17:43

vim-minimal CVE-2025-24014 低危 2:7.4.160-5.el7 vim: segmentation fault in win_line() in Vim < 9.1.1043

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24014

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-01-20 23:15 修改: 2025-08-14 01:40

vim-minimal CVE-2025-26603 低危 2:7.4.160-5.el7 vim: heap-use-after-free in function str_to_reg in vim/vim

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-26603

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2025-02-18 19:15 修改: 2025-08-18 18:23

vim-minimal CVE-2026-26269 低危 2:7.4.160-5.el7 vim: Netbeans specialKeys stack buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-26269

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-13 20:17 修改: 2026-02-18 21:29

vim-minimal CVE-2026-28422 低危 2:7.4.160-5.el7 vim: Vim: Integrity impact due to stack-buffer-overflow via wide terminal statusline rendering

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28422

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-27 22:16 修改: 2026-03-04 20:44

binutils CVE-2018-12934 低危 2.27-34.base.el7 binutils: Uncontrolled Resource Consumption in remember_Ktype in cplus-dem.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-12934

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-06-28 14:29 修改: 2024-11-21 03:46

binutils CVE-2018-17360 低危 2.27-34.base.el7 binutils: heap-based buffer over-read in bfd_getl32 in libbfd.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17360

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-23 18:29 修改: 2024-11-21 03:54

binutils CVE-2018-17794 低危 2.27-34.base.el7 binutils: NULL pointer dereference in libiberty/cplus-dem.c:work_stuff_copy_to_from() via crafted input

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17794

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-09-30 20:29 修改: 2024-11-21 03:54

binutils CVE-2018-17985 低危 2.27-34.base.el7 binutils: Stack consumption problem caused by the cplus_demangle_type

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-17985

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-04 23:29 修改: 2024-11-21 03:55

binutils CVE-2018-18484 低危 2.27-34.base.el7 binutils: Stack exhaustion in cp-demangle.c allows for denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18484

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2018-10-18 21:29 修改: 2024-11-21 03:56

ncurses CVE-2017-11112 低危 5.9-14.20130511.el7_4 ncurses: Illegal address access in append_acs function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11112

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

ncurses CVE-2017-11113 低危 5.9-14.20130511.el7_4 ncurses: Null pointer dereference vulnerability in _nc_parse_entry function

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11113

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-07-08 17:29 修改: 2025-04-20 01:37

zlib CVE-2016-9840 低危 1.2.7-18.el7 1.2.7-21.el7_9.1 zlib: Out-of-bound pointer arithmetic in inftrees.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-9840

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2017-05-23 04:29 修改: 2026-05-13 00:24

zlib CVE-2026-27171 低危 1.2.7-18.el7 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:89169d87dbe2b72ba42bfbb3579c957322baca28e03a1e558076542a1c1b2b4a

发布日期: 2026-02-18 04:16 修改: 2026-03-25 21:27

usr/local/bin/gosu (gobinary)
低危漏洞:4 中危漏洞:57 高危漏洞:59 严重漏洞:5
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2022-23806 严重 v1.13.10 1.16.14, 1.17.7 golang: crypto/elliptic: IsOnCurve returns true for invalid field elements

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49

stdlib CVE-2023-24538 严重 v1.13.10 1.19.8, 1.20.3 golang: html/template: backticks not treated as string delimiters

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15

stdlib CVE-2023-24540 严重 v1.13.10 1.19.9, 1.20.4 golang: html/template: improper handling of JavaScript whitespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15

stdlib CVE-2024-24790 严重 v1.13.10 1.21.11, 1.22.4 golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-06-05 16:15 修改: 2024-11-21 08:59

stdlib CVE-2025-68121 严重 v1.13.10 1.24.13, 1.25.7, 1.26.0-rc.3 crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-02-05 18:16 修改: 2026-04-29 14:16

stdlib CVE-2020-16845 高危 v1.13.10 1.13.15, 1.14.7 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16845

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2020-08-06 18:15 修改: 2024-11-21 05:07

stdlib CVE-2021-27918 高危 v1.13.10 1.15.9, 1.16.1 golang: encoding/xml: infinite loop when using xml.NewTokenDecoder with a custom TokenReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27918

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-03-11 00:15 修改: 2024-11-21 05:58

stdlib CVE-2021-33195 高危 v1.13.10 1.15.13, 1.16.5 golang: net: lookup functions may return invalid host names

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33195

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08

stdlib CVE-2021-33196 高危 v1.13.10 1.15.13, 1.16.5 golang: archive/zip: malformed archive may cause panic or memory exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33196

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08

stdlib CVE-2021-33198 高危 v1.13.10 1.15.13, 1.16.5 golang: math/big.Rat: may cause a panic or an unrecoverable fatal error if passed inputs with very large exponents

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33198

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08

stdlib CVE-2021-39293 高危 v1.13.10 1.16.8, 1.17.1 golang: archive/zip: malformed archive may cause panic or memory exhaustion (incomplete fix of CVE-2021-33196)

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39293

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-01-24 01:15 修改: 2024-11-21 06:19

stdlib CVE-2021-41771 高危 v1.13.10 1.16.10, 1.17.3 golang: debug/macho: invalid dynamic symbol table command can cause panic

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26

stdlib CVE-2021-41772 高危 v1.13.10 1.16.10, 1.17.3 golang: archive/zip: Reader.Open panics on empty string

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-11-08 06:15 修改: 2024-11-21 06:26

stdlib CVE-2021-44716 高危 v1.13.10 1.16.12, 1.17.5 golang: net/http: limit growth of header canonicalization cache

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31

stdlib CVE-2022-23772 高危 v1.13.10 1.16.14, 1.17.7 golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-02-11 01:15 修改: 2024-11-21 06:49

stdlib CVE-2022-24675 高危 v1.13.10 1.17.9, 1.18.1 golang: encoding/pem: fix stack overflow in Decode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:50

stdlib CVE-2022-24921 高危 v1.13.10 1.16.15, 1.17.8 golang: regexp: stack exhaustion via a deeply nested expression

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-03-05 20:15 修改: 2024-11-21 06:51

stdlib CVE-2022-27664 高危 v1.13.10 1.18.6, 1.19.1 golang: net/http: handle server errors after sending GOAWAY

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-09-06 18:15 修改: 2024-11-21 06:56

stdlib CVE-2022-28131 高危 v1.13.10 1.17.12, 1.18.4 golang: encoding/xml: stack exhaustion in Decoder.Skip

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:56

stdlib CVE-2022-28327 高危 v1.13.10 1.17.9, 1.18.1 golang: crypto/elliptic: panic caused by oversized scalar

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-04-20 10:15 修改: 2024-11-21 06:57

stdlib CVE-2022-2879 高危 v1.13.10 1.18.7, 1.19.2 golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01

stdlib CVE-2022-2880 高危 v1.13.10 1.18.7, 1.19.2 golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-10-14 15:15 修改: 2024-11-21 07:01

stdlib CVE-2022-29804 高危 v1.13.10 1.17.11, 1.18.3 ELSA-2022-17957: ol8addon security update (IMPORTANT)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2024-11-21 06:59

stdlib CVE-2022-30580 高危 v1.13.10 1.17.11, 1.18.3 golang: os/exec: Code injection in Cmd.Start

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 18:16

stdlib CVE-2022-30630 高危 v1.13.10 1.17.12, 1.18.4 golang: io/fs: stack exhaustion in Glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 18:16

stdlib CVE-2022-30631 高危 v1.13.10 1.17.12, 1.18.4 golang: compress/gzip: stack exhaustion in Reader.Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2025-10-20 18:15

stdlib CVE-2022-30632 高危 v1.13.10 1.17.12, 1.18.4 golang: path/filepath: stack exhaustion in Glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:03

stdlib CVE-2022-30633 高危 v1.13.10 1.17.12, 1.18.4 golang: encoding/xml: stack exhaustion in Unmarshal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 18:16

stdlib CVE-2022-30634 高危 v1.13.10 1.17.11, 1.18.3 ELSA-2022-17957: ol8addon security update (IMPORTANT)

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-07-15 20:15 修改: 2024-11-21 07:03

stdlib CVE-2022-30635 高危 v1.13.10 1.17.12, 1.18.4 golang: encoding/gob: stack exhaustion in Decoder.Decode

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 18:16

stdlib CVE-2022-32189 高危 v1.13.10 1.17.13, 1.18.5 golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2024-11-21 07:05

stdlib CVE-2022-41715 高危 v1.13.10 1.18.7, 1.19.2 golang: regexp/syntax: limit memory used by parsing regexps

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-10-14 15:16 修改: 2024-11-21 07:23

stdlib CVE-2022-41716 高危 v1.13.10 1.18.8, 1.19.3 Due to unsanitized NUL values, attackers may be able to maliciously se ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-11-02 16:15 修改: 2024-11-21 07:23

stdlib CVE-2022-41720 高危 v1.13.10 1.18.9, 1.19.4 golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-12-07 17:15 修改: 2025-04-23 16:15

stdlib CVE-2022-41722 高危 v1.13.10 1.19.6, 1.20.1 golang: path/filepath: path-filepath filepath.Clean path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23

stdlib CVE-2022-41723 高危 v1.13.10 1.19.6, 1.20.1 golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-02-28 18:15 修改: 2025-05-05 16:15

stdlib CVE-2022-41724 高危 v1.13.10 1.19.6, 1.20.1 golang: crypto/tls: large handshake records may cause panics

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23

stdlib CVE-2022-41725 高危 v1.13.10 1.19.6, 1.20.1 golang: net/http, mime/multipart: denial of service from excessive resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-02-28 18:15 修改: 2024-11-21 07:23

stdlib CVE-2023-24534 高危 v1.13.10 1.19.8, 1.20.3 golang: net/http, net/textproto: denial of service from excessive memory allocation

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15

stdlib CVE-2023-24536 高危 v1.13.10 1.19.8, 1.20.3 golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-04-06 16:15 修改: 2025-02-12 18:15

stdlib CVE-2023-24537 高危 v1.13.10 1.19.8, 1.20.3 golang: go/parser: Infinite loop in parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-04-06 16:15 修改: 2025-02-12 17:15

stdlib CVE-2023-24539 高危 v1.13.10 1.19.9, 1.20.4 golang: html/template: improper sanitization of CSS values

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15

stdlib CVE-2023-29400 高危 v1.13.10 1.19.9, 1.20.4 golang: html/template: improper handling of empty HTML attributes

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-05-11 16:15 修改: 2025-01-24 17:15

stdlib CVE-2023-29403 高危 v1.13.10 1.19.10, 1.20.5 golang: runtime: unexpected behavior of setuid/setgid binaries

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-06-08 21:15 修改: 2025-01-06 20:15

stdlib CVE-2023-39325 高危 v1.13.10 1.20.10, 1.21.3 golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-10-11 22:15 修改: 2024-11-21 08:15

stdlib CVE-2023-45283 高危 v1.13.10 1.20.11, 1.21.4, 1.20.12, 1.21.5 The filepath package does not recognize paths with a \??\ prefix as sp ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26

stdlib CVE-2023-45287 高危 v1.13.10 1.20.0 golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges.

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-12-05 17:15 修改: 2024-11-21 08:26

stdlib CVE-2023-45288 高危 v1.13.10 1.21.9, 1.22.2 golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-04-04 21:15 修改: 2026-04-15 00:35

stdlib CVE-2024-34156 高危 v1.13.10 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-09-06 21:15 修改: 2026-04-15 00:35

stdlib CVE-2025-61726 高危 v1.13.10 1.24.12, 1.25.6 golang: net/url: Memory exhaustion in query parameter parsing in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-01-28 20:16 修改: 2026-02-06 18:47

stdlib CVE-2025-61729 高危 v1.13.10 1.24.11, 1.25.5 crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-12-02 19:15 修改: 2025-12-19 18:25

stdlib CVE-2026-25679 高危 v1.13.10 1.25.8, 1.26.1 net/url: Incorrect parsing of IPv6 host literals in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-03-06 22:16 修改: 2026-04-21 14:43

stdlib CVE-2026-32280 高危 v1.13.10 1.25.9, 1.26.2 crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-04-08 02:16 修改: 2026-04-16 19:16

stdlib CVE-2026-32281 高危 v1.13.10 1.25.9, 1.26.2 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-04-08 02:16 修改: 2026-04-16 19:15

stdlib CVE-2026-32283 高危 v1.13.10 1.25.9, 1.26.2 crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-04-08 02:16 修改: 2026-04-16 19:12

stdlib CVE-2026-33811 高危 v1.13.10 1.25.10, 1.26.3 net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-12 20:23

stdlib CVE-2026-33814 高危 v1.13.10 1.25.10, 1.26.3 When processing HTTP/2 SETTINGS frames, transport will enter an infini ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-13 14:41

stdlib CVE-2026-39820 高危 v1.13.10 1.25.10, 1.26.3 Well-crafted inputs reaching ParseAddress, ParseAddressList, and Parse ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-13 15:10

stdlib CVE-2026-39823 高危 v1.13.10 1.25.10, 1.26.3 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-13 16:58

stdlib CVE-2026-39825 高危 v1.13.10 1.25.10, 1.26.3 ReverseProxy can forward queries containing parameters not visible to ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-13 16:58

stdlib CVE-2026-39826 高危 v1.13.10 1.25.10, 1.26.3 If a trusted template author were to write a <script> tag containing a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-13 16:59

stdlib CVE-2026-39836 高危 v1.13.10 1.25.10, 1.26.3 ELSA-2026-22112: go-toolset:ol8 security update (IMPORTANT)

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-13 15:11

stdlib CVE-2026-42499 高危 v1.13.10 1.25.10, 1.26.3 Pathological inputs could cause DoS through consumePhrase when parsing ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-05-07 20:16 修改: 2026-05-13 16:59

stdlib CVE-2026-42504 高危 v1.13.10 1.25.11, 1.26.4 Decoding a maliciously-crafted MIME header containing many invalid enc ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-06-02 23:16 修改: 2026-06-04 16:15

stdlib CVE-2020-14039 中危 v1.13.10 1.13.13, 1.14.5 CVE-2020-14039 affecting package golang 1.13.11-

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14039

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2020-07-17 16:15 修改: 2024-11-21 05:02

stdlib CVE-2020-15586 中危 v1.13.10 1.13.13, 1.14.5 golang: data race in certain net/http servers including ReverseProxy can lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15586

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2020-07-17 16:15 修改: 2024-11-21 05:05

stdlib CVE-2020-24553 中危 v1.13.10 1.14.8, 1.15.1 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-24553

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2020-09-02 17:15 修改: 2024-11-21 05:14

stdlib CVE-2021-3114 中危 v1.13.10 1.14.14, 1.15.7 golang: crypto/elliptic: incorrect operations on the P-224 curve

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3114

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-01-26 18:16 修改: 2024-11-21 06:20

stdlib CVE-2021-31525 中危 v1.13.10 1.15.12, 1.16.4 golang: net/http: panic in ReadRequest and ReadResponse when reading a very large header

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31525

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-05-27 13:15 修改: 2024-11-21 06:05

stdlib CVE-2021-33197 中危 v1.13.10 1.15.13, 1.16.5 golang: net/http/httputil: ReverseProxy forwards connection headers if first one is empty

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33197

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-08-02 19:15 修改: 2024-11-21 06:08

stdlib CVE-2021-34558 中危 v1.13.10 1.15.14, 1.16.6 golang: crypto/tls: certificate of wrong type is causing TLS client to panic

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34558

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-07-15 14:15 修改: 2024-11-21 06:10

stdlib CVE-2021-36221 中危 v1.13.10 1.15.15, 1.16.7 golang: net/http/httputil: panic due to racy read of persistConn after handler panic

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36221

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2021-08-08 06:15 修改: 2024-11-21 06:13

stdlib CVE-2021-44717 中危 v1.13.10 1.16.12, 1.17.5 golang: syscall: don't close fd 0 on ForkExec error

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-01-01 05:15 修改: 2024-11-21 06:31

stdlib CVE-2022-1705 中危 v1.13.10 1.17.12, 1.18.4 golang: net/http: improper sanitization of Transfer-Encoding header

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 18:16

stdlib CVE-2022-1962 中危 v1.13.10 1.17.12, 1.18.4 golang: go/parser: stack exhaustion in all Parse* functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 20:16

stdlib CVE-2022-29526 中危 v1.13.10 1.17.10, 1.18.2 golang: syscall: faccessat checks wrong group

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-06-23 17:15 修改: 2024-11-21 06:59

stdlib CVE-2022-32148 中危 v1.13.10 1.17.12, 1.18.4 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 20:16

stdlib CVE-2022-41717 中危 v1.13.10 1.18.9, 1.19.4 golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-12-08 20:15 修改: 2024-11-21 07:23

stdlib CVE-2023-24532 中危 v1.13.10 1.19.7, 1.20.2 golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-03-08 20:15 修改: 2024-11-21 07:48

stdlib CVE-2023-29406 中危 v1.13.10 1.19.11, 1.20.6 golang: net/http: insufficient sanitization of Host header

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-07-11 20:15 修改: 2024-11-21 07:56

stdlib CVE-2023-29409 中危 v1.13.10 1.19.12, 1.20.7, 1.21.0-rc.4 golang: crypto/tls: slow verification of certificate chains containing large RSA keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-08-02 20:15 修改: 2024-11-21 07:57

stdlib CVE-2023-39318 中危 v1.13.10 1.20.8, 1.21.1 golang: html/template: improper handling of HTML-like comments within script contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15

stdlib CVE-2023-39319 中危 v1.13.10 1.20.8, 1.21.1 golang: html/template: improper handling of special tags within script contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-09-08 17:15 修改: 2024-11-21 08:15

stdlib CVE-2023-39326 中危 v1.13.10 1.20.12, 1.21.5 golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-12-06 17:15 修改: 2024-11-21 08:15

stdlib CVE-2023-45284 中危 v1.13.10 1.20.11, 1.21.4 On Windows, The IsLocal function does not correctly detect reserved de ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2023-11-09 17:15 修改: 2024-11-21 08:26

stdlib CVE-2023-45289 中危 v1.13.10 1.21.8, 1.22.1 golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-03-05 23:15 修改: 2026-04-15 00:35

stdlib CVE-2023-45290 中危 v1.13.10 1.21.8, 1.22.1 golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-03-05 23:15 修改: 2026-04-15 00:35

stdlib CVE-2024-24783 中危 v1.13.10 1.21.8, 1.22.1 golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-03-05 23:15 修改: 2026-04-15 00:35

stdlib CVE-2024-24784 中危 v1.13.10 1.21.8, 1.22.1 golang: net/mail: comments in display names are incorrectly handled

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-03-05 23:15 修改: 2026-04-15 00:35

stdlib CVE-2024-24785 中危 v1.13.10 1.21.8, 1.22.1 golang: html/template: errors returned from MarshalJSON methods may break template escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-03-05 23:15 修改: 2026-04-15 00:35

stdlib CVE-2024-24789 中危 v1.13.10 1.21.11, 1.22.4 golang: archive/zip: Incorrect handling of certain ZIP files

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-06-05 16:15 修改: 2025-01-31 15:15

stdlib CVE-2024-24791 中危 v1.13.10 1.21.12, 1.22.5 net/http: Denial of service due to improper 100-continue handling in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-07-02 22:15 修改: 2026-04-15 00:35

stdlib CVE-2024-34155 中危 v1.13.10 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-09-06 21:15 修改: 2026-04-15 00:35

stdlib CVE-2024-34158 中危 v1.13.10 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2024-09-06 21:15 修改: 2026-04-15 00:35

stdlib CVE-2024-45336 中危 v1.13.10 1.22.11, 1.23.5, 1.24.0-rc.2 golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-01-28 02:15 修改: 2026-04-15 00:35

stdlib CVE-2025-0913 中危 v1.13.10 1.23.10, 1.24.4 Inconsistent handling of O_CREATE|O_EXCL on Unix and Windows in os in syscall

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-06-11 18:15 修改: 2025-08-08 14:53

stdlib CVE-2025-22866 中危 v1.13.10 1.22.12, 1.23.6, 1.24.0-rc.3 crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-02-06 17:15 修改: 2026-04-15 00:35

stdlib CVE-2025-22870 中危 v1.13.10 1.23.7, 1.24.1 golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-03-12 19:15 修改: 2026-04-16 23:16

stdlib CVE-2025-22871 中危 v1.13.10 1.23.8, 1.24.2 net/http: Request smuggling due to acceptance of invalid chunked data in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-04-08 20:15 修改: 2026-05-12 13:16

stdlib CVE-2025-22873 中危 v1.13.10 1.23.9, 1.24.3 os: os: Information disclosure via path traversal using specially crafted filenames

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-02-04 23:15 修改: 2026-02-10 15:16

stdlib CVE-2025-4673 中危 v1.13.10 1.23.10, 1.24.4 net/http: Sensitive headers not cleared on cross-origin redirect in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-06-11 17:15 修改: 2026-04-15 00:35

stdlib CVE-2025-47906 中危 v1.13.10 1.23.12, 1.24.6 os/exec: Unexpected paths returned from LookPath in os/exec

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-09-18 19:15 修改: 2026-01-27 19:56

stdlib CVE-2025-47907 中危 v1.13.10 1.23.12, 1.24.6 database/sql: Postgres Scan Race Condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-08-07 16:15 修改: 2026-01-29 19:11

stdlib CVE-2025-47912 中危 v1.13.10 1.24.8, 1.25.2 net/url: Insufficient validation of bracketed IPv6 hostnames in net/url

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-01-29 13:57

stdlib CVE-2025-58183 中危 v1.13.10 1.24.8, 1.25.2 golang: archive/tar: Unbounded allocation when parsing GNU sparse map

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-04-15 00:35

stdlib CVE-2025-58185 中危 v1.13.10 1.24.8, 1.25.2 encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-02-06 20:26

stdlib CVE-2025-58187 中危 v1.13.10 1.24.9, 1.25.3 crypto/x509: Quadratic complexity when checking name constraints in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-01-29 16:02

stdlib CVE-2025-58188 中危 v1.13.10 1.24.8, 1.25.2 crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-01-29 15:55

stdlib CVE-2025-58189 中危 v1.13.10 1.24.8, 1.25.2 crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-01-29 15:49

stdlib CVE-2025-61723 中危 v1.13.10 1.24.8, 1.25.2 encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-01-29 15:49

stdlib CVE-2025-61724 中危 v1.13.10 1.24.8, 1.25.2 net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-01-29 15:30

stdlib CVE-2025-61725 中危 v1.13.10 1.24.8, 1.25.2 net/mail: Excessive CPU consumption in ParseAddress in net/mail

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-04-15 00:35

stdlib CVE-2025-61727 中危 v1.13.10 1.24.11, 1.25.5 golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-12-03 20:16 修改: 2025-12-18 20:15

stdlib CVE-2025-61728 中危 v1.13.10 1.24.12, 1.25.6 golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-01-28 20:16 修改: 2026-02-06 18:45

stdlib CVE-2025-61730 中危 v1.13.10 1.24.12, 1.25.6 crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-01-28 20:16 修改: 2026-02-03 20:36

stdlib CVE-2026-27142 中危 v1.13.10 1.25.8, 1.26.1 html/template: URLs in meta content attribute actions are not escaped in html/template

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-03-06 22:16 修改: 2026-04-21 14:30

stdlib CVE-2026-27145 中危 v1.13.10 1.25.11, 1.26.4 *x509.Certificate).VerifyHostname previously called matchHostnames in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-06-02 23:16 修改: 2026-06-04 16:15

stdlib CVE-2026-32282 中危 v1.13.10 1.25.9, 1.26.2 golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-04-08 02:16 修改: 2026-04-16 19:15

stdlib CVE-2026-32288 中危 v1.13.10 1.25.9, 1.26.2 archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-04-08 02:16 修改: 2026-04-16 19:08

stdlib CVE-2026-32289 中危 v1.13.10 1.25.9, 1.26.2 html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-04-08 02:16 修改: 2026-04-16 19:06

stdlib CVE-2026-42507 中危 v1.13.10 1.25.11, 1.26.4 When returning errors, functions in the net/textproto package would in ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-06-02 23:16 修改: 2026-06-04 16:15

stdlib CVE-2022-30629 低危 v1.13.10 1.17.11, 1.18.3 golang: crypto/tls: session tickets lack random ticket_age_add

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2022-08-10 20:15 修改: 2026-03-06 20:16

stdlib CVE-2024-45341 低危 v1.13.10 1.22.11, 1.23.5, 1.24.0-rc.2 golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-01-28 02:15 修改: 2026-04-15 00:35

stdlib CVE-2025-58186 低危 v1.13.10 1.24.8, 1.25.2 golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2025-10-29 23:16 修改: 2026-04-15 00:35

stdlib CVE-2026-27139 低危 v1.13.10 1.25.8, 1.26.1 os: FileInfo can escape from a Root in golang os module

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139

镜像层: sha256:6025da398c00b886dd70a5507215e6669dd32f649e9fc22cd760975c04b19ffe

发布日期: 2026-03-06 22:16 修改: 2026-04-21 14:32