docker.io/sonarqube:26.6.0.123539-community linux/amd64

docker.io/sonarqube:26.6.0.123539-community - Trivy安全扫描结果 扫描时间: 2026-06-12 10:08
全部漏洞信息
低危漏洞:36 中危漏洞:138 高危漏洞:29 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-06-12 10:08

docker.io/sonarqube:26.6.0.123539-community (ubuntu 24.04) (ubuntu)
低危漏洞:36 中危漏洞:101 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssl3t64 CVE-2026-45447 高危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 15:16
openssl CVE-2026-45447 高危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 15:16
binutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
binutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
binutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
binutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
binutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
binutils-common CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
binutils-common CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
binutils-common CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
binutils-common CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
binutils-common CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
binutils-common CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
binutils-common CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
binutils-x86-64-linux-gnu CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
binutils-x86-64-linux-gnu CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
binutils-x86-64-linux-gnu CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
binutils-x86-64-linux-gnu CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
binutils-x86-64-linux-gnu CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
binutils-x86-64-linux-gnu CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
binutils-x86-64-linux-gnu CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libbinutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
libbinutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
libbinutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
libbinutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
libbinutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
libbinutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
libbinutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libc-bin CVE-2026-4046 中危 2.39-0ubuntu8.7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-30 18:16 修改: 2026-04-20 22:16
libc-bin CVE-2026-4437 中危 2.39-0ubuntu8.7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:41
libc-bin CVE-2026-4438 中危 2.39-0ubuntu8.7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:40
libc-bin CVE-2026-5435 中危 2.39-0ubuntu8.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38
libc-bin CVE-2026-6238 中危 2.39-0ubuntu8.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 19:37 修改: 2026-05-04 17:57
libc6 CVE-2026-4046 中危 2.39-0ubuntu8.7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-30 18:16 修改: 2026-04-20 22:16
libc6 CVE-2026-4437 中危 2.39-0ubuntu8.7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:41
libc6 CVE-2026-4438 中危 2.39-0ubuntu8.7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:40
libc6 CVE-2026-5435 中危 2.39-0ubuntu8.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38
libc6 CVE-2026-6238 中危 2.39-0ubuntu8.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-28 19:37 修改: 2026-05-04 17:57
libctf-nobfd0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
libctf-nobfd0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
libctf-nobfd0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
libctf-nobfd0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
libctf-nobfd0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
libctf-nobfd0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
libctf-nobfd0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
libctf0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
libctf0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
libctf0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
libctf0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
libctf0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
libctf0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
libctf0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-11-28 07:15 修改: 2026-06-02 14:16
libgcrypt20 CVE-2026-41989 中危 1.10.3-2build1 1.10.3-2ubuntu0.1 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-23 05:16 修改: 2026-04-27 18:33
libgnutls30t64 CVE-2026-33845 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-30 18:16 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-33846 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-04 10:15 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-3832 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass allows acceptance of revoked server certificates via crafted OCSP response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3832

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-30 18:16 修改: 2026-06-02 17:16
libgnutls30t64 CVE-2026-3833 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-30 18:16 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-42009 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-18 13:16 修改: 2026-06-08 17:16
libgnutls30t64 CVE-2026-42010 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Authentication Bypass via NUL Character in Username

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-07 12:16 修改: 2026-06-10 16:17
libgnutls30t64 CVE-2026-42011 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Security bypass due to incorrect name constraint handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-07 15:16 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-42012 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-42013 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-42014 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: Fix use-after-free in gnutls_pkcs11_token_set_pin

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgnutls30t64 CVE-2026-42015 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-5260 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 gnutls: gnutls: Information disclosure via heap overread in RSA key exchange

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-05-26 22:16 修改: 2026-06-02 16:16
libgnutls30t64 CVE-2026-5419 中危 3.8.3-1.1ubuntu3.5 3.8.3-1.1ubuntu3.6 guntls: gnutls: Information disclosure via timing side-channel in PKCS#7 padding removal

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5419

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-01 21:16 修改: 2026-06-02 17:16
libgprofng0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
libgprofng0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
libgprofng0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
libgprofng0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
libgprofng0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
libgprofng0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
libgprofng0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
libsframe1 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
libsframe1 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
libsframe1 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 16:59
libsframe1 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:44
libsframe1 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-09 15:15 修改: 2026-03-13 16:43
libsframe1 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-19 13:16
libsframe1 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 19:16 修改: 2026-03-11 15:49
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
binutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-10 20:42
libssl3t64 CVE-2026-34182 中危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 17:16
libssl3t64 CVE-2026-45445 中危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libsystemd0 CVE-2026-40226 中危 255.4-1ubuntu8.15 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-04-17 22:02
libudev1 CVE-2026-40226 中危 255.4-1ubuntu8.15 255.4-1ubuntu8.16 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-04-17 22:02
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
locales CVE-2026-4046 中危 2.39-0ubuntu8.7 glibc: glibc: Denial of Service via iconv() function with specific character sets

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-30 18:16 修改: 2026-04-20 22:16
locales CVE-2026-4437 中危 2.39-0ubuntu8.7 glibc: glibc: Incorrect DNS response parsing via crafted DNS server response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4437

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:41
locales CVE-2026-4438 中危 2.39-0ubuntu8.7 glibc: glibc: Invalid DNS hostname returned via gethostbyaddr functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4438

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-20 20:16 修改: 2026-04-07 18:40
locales CVE-2026-5435 中危 2.39-0ubuntu8.7 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38
locales CVE-2026-6238 中危 2.39-0ubuntu8.7 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-04-28 19:37 修改: 2026-05-04 17:57
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
binutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-03-06 18:16 修改: 2026-03-20 17:08
openssl CVE-2026-34182 中危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 17:16
openssl CVE-2026-45445 中危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
tar CVE-2025-45582 中危 1.35+dfsg-3build1 tar: Tar path traversal

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-45582

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2025-07-11 17:15 修改: 2025-11-02 01:15
tar CVE-2026-5704 中危 1.35+dfsg-3build1 tar: tar: Hidden file injection via crafted archives

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-06 16:16 修改: 2026-04-22 20:08
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-03 22:16 修改: 2026-04-22 16:08
binutils-common CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
binutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
libbinutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
libssl3t64 CVE-2026-34180 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-42766 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-42767 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-42770 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-45446 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-7383 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libssl3t64 CVE-2026-9076 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
libbinutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.15 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-05-05 02:16
libgprofng0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.15 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-10 16:16 修改: 2026-05-05 02:16
libgprofng0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
liblzma5 CVE-2026-34743 低危 5.6.1+really5.4.5-1ubuntu0.2 5.6.1+really5.4.5-1ubuntu0.3 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2026-04-02 19:21 修改: 2026-04-15 17:33
binutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
libctf0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
libctf0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
binutils-common CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2024-12-26 09:15 修改: 2026-04-15 00:35
libctf-nobfd0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
libgcrypt20 CVE-2024-2236 低危 1.10.3-2build1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2024-03-06 22:15 修改: 2026-04-15 00:35
libctf-nobfd0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
binutils-x86-64-linux-gnu CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
openssl CVE-2026-34180 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
openssl CVE-2026-42766 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
openssl CVE-2026-42767 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
openssl CVE-2026-42770 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
openssl CVE-2026-45446 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
openssl CVE-2026-7383 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
openssl CVE-2026-9076 低危 3.0.13-0ubuntu3.9 3.0.13-0ubuntu3.11 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2026-06-09 17:17 修改: 2026-06-10 08:16
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:98effb2dfe85d4c431f97d90482075f19e5fc3a57c2dd423d8bdfd4813620043

发布日期: 2024-12-26 09:15 修改: 2026-04-15 00:35
libsframe1 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2017-08-28 21:29 修改: 2026-05-13 00:24
libsframe1 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
binutils-x86-64-linux-gnu CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:4b4ffff47be2674a5c1b6b8299e4c41ac088ce088f899e137e5948c6dec7fe05

发布日期: 2025-02-10 18:15 修改: 2025-03-03 17:32
Java (jar)
低危漏洞:0 中危漏洞:37 高危漏洞:27 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
io.netty:netty-codec CVE-2026-42583 高危 4.1.130.Final 4.1.133.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:22
io.netty:netty-codec CVE-2026-42583 高危 4.1.130.Final 4.1.133.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:22
io.netty:netty-codec CVE-2026-42583 高危 4.1.130.Final 4.1.133.Final Netty is an asynchronous, event-driven network application framework. ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42583

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:22
io.netty:netty-codec-dns CVE-2026-42579 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42579

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 17:16
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.130.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-03-27 20:16 修改: 2026-03-30 20:12
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.130.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-03-27 20:16 修改: 2026-03-30 20:12
io.netty:netty-codec-http CVE-2026-33870 高危 4.1.130.Final 4.1.132.Final, 4.2.10.Final io.netty/netty-codec-http: Netty: Request smuggling via incorrect parsing of HTTP/1.1 chunked transfer encoding extension values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33870

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-03-27 20:16 修改: 2026-03-30 20:12
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:15
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:15
io.netty:netty-codec-http CVE-2026-42584 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42584

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:15
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:20
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:20
io.netty:netty-codec-http CVE-2026-42587 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:20
io.netty:netty-codec-http2 CVE-2026-33871 高危 4.1.130.Final 4.1.132.Final, 4.2.11.Final netty: Netty: Denial of Service via HTTP/2 CONTINUATION frame flood

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33871

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-03-27 20:16 修改: 2026-03-30 20:10
io.netty:netty-codec-http2 CVE-2026-42587 高危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42587

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:20
io.netty:netty-handler CVE-2026-44249 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-handler CVE-2026-44249 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-handler CVE-2026-44249 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-44249

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-handler CVE-2026-45416 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-handler CVE-2026-45416 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-handler CVE-2026-45416 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45416

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-resolver-dns CVE-2026-45674 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45674

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.netty:netty-resolver-dns CVE-2026-47691 高危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty has Insufficient Bailiwick Validation for NS Records

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47691

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
org.apache.sshd:sshd-common CVE-2024-41909 高危 2.9.2 2.12.0 mina-sshd: integrity check bypass vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-41909

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2024-08-12 16:15 修改: 2025-03-27 16:15
org.bouncycastle:bcprov-jdk18on CVE-2026-5598 高危 1.79 1.84 bouncycastle: BC-JAVA: private key leakage via non-constant time comparisons

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5598

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-15 10:16 修改: 2026-05-19 00:16
tools.jackson.core:jackson-core CVE-2026-29062 高危 3.0.4 3.1.0 jackson-core: jackson-core: Denial of Service via excessive JSON nesting

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29062

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-03-06 08:16 修改: 2026-03-10 19:05
tools.jackson.core:jackson-core GHSA-2m67-wjpj-xhg9 高危 3.0.4 3.1.1 Jackson Core: Document length constraint bypass in blocking, async, and DataInput parsers

漏洞详情: https://github.com/advisories/GHSA-2m67-wjpj-xhg9

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-04 04:17 修改: 2026-04-08 22:42
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 13:14
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 13:14
io.netty:netty-codec-http CVE-2026-42581 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42581

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 13:14
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:24
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:24
io.netty:netty-codec-http CVE-2026-42585 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: io.netty/netty-codec-http: Netty: Request smuggling via malformed Transfer-Encoding parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42585

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 12:24
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.21.0 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.sun.mail:jakarta.mail CVE-2025-7962 中危 1.6.3 1.6.8, 2.0.2 com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2025-07-21 18:15 修改: 2025-11-13 18:36
io.netty:netty-codec-http2 CVE-2026-47244 中危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty HTTP/2: Advertised MAX_CONCURRENT_STREAMS are not enforced

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-47244

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
com.sun.mail:jakarta.mail CVE-2025-7962 中危 2.0.1 1.6.8, 2.0.2 com.sun.mail/jakarta.mail: Jakarta Mail SMTP Injection Vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-7962

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2025-07-21 18:15 修改: 2025-11-13 18:36
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.15.0 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.15.0 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.17.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.17.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
com.fasterxml.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 2.19.2 2.21.1, 2.18.6 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.130.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-06 22:16 修改: 2026-05-11 14:29
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.130.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-06 22:16 修改: 2026-05-11 14:29
io.netty:netty-resolver-dns CVE-2026-45673 中危 4.1.130.Final 4.2.15.Final, 4.1.135.Final Netty: DNS Cache Poisoning due to Predictable PRNG and Default Static Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45673

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
io.opentelemetry:opentelemetry-api CVE-2026-45292 中危 1.31.0 1.62.0 opentelemetry-java: opentelemetry-api: opentelemetry-extension-trace-propagators: OpenTelemetry Java: Denial of Service due to unbounded memory allocation when parsing oversized baggage

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45292

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-28 17:16 修改: 2026-05-29 15:42
net.i2p.crypto:eddsa CVE-2020-36843 中危 0.3.0 The implementation of EdDSA in EdDSA-Java (aka ed25519-java) through 0 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-36843

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2025-03-13 06:15 修改: 2026-04-15 00:35
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.9 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2025-07-11 15:15 修改: 2025-11-04 22:16
org.apache.logging.log4j:log4j-1.2-api CVE-2026-34479 中危 2.19.0 2.25.4 org.apache.logging.log4j/log4j-1.2-api: Apache Log4j 1-to-Log4j 2 bridge: Log processing denial of service due to improper XML escaping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34479

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-10 16:16 修改: 2026-05-06 18:21
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.19.0 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2025-12-18 21:15 修改: 2026-01-20 01:15
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.19.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-10 16:16 修改: 2026-05-06 16:49
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.19.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-10 16:16 修改: 2026-04-24 18:21
org.apache.logging.log4j:log4j-core CVE-2025-68161 中危 2.25.0 2.25.3 Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68161

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2025-12-18 21:15 修改: 2026-01-20 01:15
org.apache.logging.log4j:log4j-core CVE-2026-34477 中危 2.25.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34477

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-10 16:16 修改: 2026-05-06 16:49
org.apache.logging.log4j:log4j-core CVE-2026-34478 中危 2.25.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34478

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-10 16:16 修改: 2026-04-24 18:10
org.apache.logging.log4j:log4j-core CVE-2026-34480 中危 2.25.0 2.25.4 org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34480

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-10 16:16 修改: 2026-04-24 18:21
io.netty:netty-codec-http CVE-2026-41417 中危 4.1.130.Final 4.1.133.Final, 4.2.13.Final netty: Netty: HTTP request smuggling via URI manipulation and CRLF injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41417

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-06 22:16 修改: 2026-05-11 14:29
org.apache.sshd:sshd-common CVE-2023-35887 中危 2.9.2 2.9.3 apache-mina-sshd: information exposure in SFTP server implementations

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-35887

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2023-07-10 16:15 修改: 2024-11-21 08:08
org.bouncycastle:bcpkix-jdk18on CVE-2026-5588 中危 1.79 1.84 bouncycastle: BC-JAVA: PKIX draft CompositeVerifier accepts empty signature sequence as valid

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5588

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-15 10:16 修改: 2026-05-19 00:16
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 14:03
org.bouncycastle:bcprov-jdk18on CVE-2026-0636 中危 1.79 1.84 bouncycastle: BC-JAVA: LDAP injection vulnerability in LDAPStoreHelper.java

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0636

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-04-15 10:16 修改: 2026-05-19 00:16
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 14:03
io.netty:netty-codec-http CVE-2026-42580 中危 4.1.130.Final 4.2.13.Final, 4.1.133.Final netty: Netty: Request smuggling via chunk size parser integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42580

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-05-13 19:17 修改: 2026-05-18 14:03
tools.jackson.core:jackson-core GHSA-72hv-8253-57qq 中危 3.0.4 3.1.0 jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

漏洞详情: https://github.com/advisories/GHSA-72hv-8253-57qq

镜像层: sha256:c2ea2f979240697b0e2fbd59f8d74ac0c5059a3339d7c73797f0eae063642157

发布日期: 2026-02-28 02:01 修改: 2026-04-07 16:30
Node.js (node-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息