docker.io/thewebroot/imageswap-init:v1.5.3 linux/amd64

docker.io/thewebroot/imageswap-init:v1.5.3 - Trivy安全扫描结果 扫描时间: 2024-10-27 11:59
全部漏洞信息
低危漏洞:6 中危漏洞:42 高危漏洞:27 严重漏洞:2

系统OS: alpine 3.18.3 扫描引擎: Trivy 扫描时间: 2024-10-27 11:59

docker.io/thewebroot/imageswap-init:v1.5.3 (alpine 3.18.3) (alpine)
低危漏洞:4 中危漏洞:33 高危漏洞:24 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libexpat CVE-2024-45491 严重 2.5.0-r1 2.6.3-r0 libexpat: Integer Overflow or Wraparound

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libexpat CVE-2024-45492 严重 2.5.0-r1 2.6.3-r0 libexpat: integer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
bind-libs CVE-2023-4408 高危 9.18.16-r0 9.18.24-r0 bind9: Parsing large DNS messages may cause excessive CPU load

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4408

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-21 21:02
bind-libs CVE-2023-50387 高危 9.18.16-r0 9.18.24-r0 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
bind-libs CVE-2023-50868 高危 9.18.16-r0 9.18.24-r0 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
bind-libs CVE-2023-5517 高危 9.18.16-r0 9.18.24-r0 bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5517

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 14:09
bind-libs CVE-2023-5679 高危 9.18.16-r0 9.18.24-r0 bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5679

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 13:58
bind-libs CVE-2023-6516 高危 9.18.16-r0 9.18.24-r0 bind9: Specific recursive query patterns may lead to an out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6516

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 18:14
bind-tools CVE-2023-3341 高危 9.18.16-r0 9.18.19-r0 bind: stack exhaustion in control channel code may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3341

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2023-09-20 13:15 修改: 2024-02-16 18:39
bind-tools CVE-2023-4236 高危 9.18.16-r0 9.18.19-r0 bind: an assertion failure may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4236

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2023-09-20 13:15 修改: 2024-02-01 00:53
bind-tools CVE-2023-4408 高危 9.18.16-r0 9.18.24-r0 bind9: Parsing large DNS messages may cause excessive CPU load

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4408

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-21 21:02
bind-tools CVE-2023-50387 高危 9.18.16-r0 9.18.24-r0 bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
bind-tools CVE-2023-50868 高危 9.18.16-r0 9.18.24-r0 bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
bind-tools CVE-2023-5517 高危 9.18.16-r0 9.18.24-r0 bind9: Querying RFC 1918 reverse zones may cause an assertion failure when “nxdomain-redirect” is enabled

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5517

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 14:09
bind-tools CVE-2023-5679 高危 9.18.16-r0 9.18.24-r0 bind9: Enabling both DNS64 and serve-stale may cause an assertion failure during recursive resolution

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5679

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 13:58
bind-tools CVE-2023-6516 高危 9.18.16-r0 9.18.24-r0 bind9: Specific recursive query patterns may lead to an out-of-memory condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6516

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 18:14
libcrypto3 CVE-2023-5363 高危 3.1.2-r0 3.1.4-r0 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-10-25 18:17 修改: 2024-10-14 15:15
bind-libs CVE-2023-3341 高危 9.18.16-r0 9.18.19-r0 bind: stack exhaustion in control channel code may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3341

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2023-09-20 13:15 修改: 2024-02-16 18:39
bind-libs CVE-2023-4236 高危 9.18.16-r0 9.18.19-r0 bind: an assertion failure may lead to DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4236

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2023-09-20 13:15 修改: 2024-02-01 00:53
libexpat CVE-2023-52425 高危 2.5.0-r1 2.6.0-r0 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2024-02-04 20:15 修改: 2024-08-26 20:35
libexpat CVE-2024-28757 高危 2.5.0-r1 2.6.2-r0 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2024-03-10 05:15 修改: 2024-05-01 19:15
libexpat CVE-2024-45490 高危 2.5.0-r1 2.6.3-r0 libexpat: Negative Length Parsing Vulnerability in libexpat

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
libssl3 CVE-2023-5363 高危 3.1.2-r0 3.1.4-r0 openssl: Incorrect cipher key and IV length processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5363

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-10-25 18:17 修改: 2024-10-14 15:15
libxml2 CVE-2024-25062 高危 2.11.4-r0 2.11.7-r0 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-04 16:15 修改: 2024-02-13 00:40
nghttp2-libs CVE-2023-44487 高危 1.55.1-r0 1.57.0-r0 HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack)

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
sqlite-libs CVE-2023-7104 高危 3.41.2-r2 3.41.2-r3 sqlite: heap-buffer-overflow at sessionfuzz

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
krb5-libs CVE-2023-36054 中危 1.20.1-r1 1.20.2-r0 krb5: Denial of service through freeing uninitialized pointer

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2023-08-07 19:15 修改: 2023-11-15 03:23
bind-libs CVE-2023-5680 中危 9.18.16-r0 9.18.24-r0 bind9: Cleaning an ECS-enabled cache may cause excessive CPU load

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5680

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 13:53
libcrypto3 CVE-2023-5678 中危 3.1.2-r0 3.1.4-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2023-6129 中危 3.1.2-r0 3.1.4-r3 mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-01-09 17:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2023-6237 中危 3.1.2-r0 3.1.4-r4 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-04-25 07:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2024-0727 中危 3.1.2-r0 3.1.4-r5 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2024-4603 中危 3.1.2-r0 3.1.5-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libcrypto3 CVE-2024-4741 中危 3.1.2-r0 3.1.6-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libcrypto3 CVE-2024-5535 中危 3.1.2-r0 3.1.6-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libcrypto3 CVE-2024-6119 中危 3.1.2-r0 3.1.7-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
bind-tools CVE-2023-5680 中危 9.18.16-r0 9.18.24-r0 bind9: Cleaning an ECS-enabled cache may cause excessive CPU load

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5680

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-02-13 14:15 修改: 2024-10-22 13:53
busybox CVE-2023-42363 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
busybox CVE-2023-42364 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
busybox CVE-2023-42365 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
busybox CVE-2023-42366 中危 1.36.1-r2 1.36.1-r6 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
libexpat CVE-2023-52426 中危 2.5.0-r1 2.6.0-r0 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:ce0f4c80e9b7069c29422e92514e33c08ec3d731e2e02767f3e4f8c6349837fb

发布日期: 2024-02-04 20:15 修改: 2024-03-07 17:15
busybox-binsh CVE-2023-42363 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
libssl3 CVE-2023-5678 中危 3.1.2-r0 3.1.4-r1 openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl3 CVE-2023-6129 中危 3.1.2-r0 3.1.4-r3 mysql: openssl: POLY1305 MAC implementation corrupts vector registers on PowerPC

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6129

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-01-09 17:15 修改: 2024-10-14 15:15
libssl3 CVE-2023-6237 中危 3.1.2-r0 3.1.4-r4 openssl: Excessive time spent checking invalid RSA public keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6237

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-04-25 07:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-0727 中危 3.1.2-r0 3.1.4-r5 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-4603 中危 3.1.2-r0 3.1.5-r0 openssl: Excessive time spent checking DSA keys and parameters

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4603

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-05-16 16:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-4741 中危 3.1.2-r0 3.1.6-r0 openssl: Use After Free with SSL_free_buffers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3 CVE-2024-5535 中危 3.1.2-r0 3.1.6-r0 openssl: SSL_select_next_proto buffer overread

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libssl3 CVE-2024-6119 中危 3.1.2-r0 3.1.7-r0 openssl: Possible denial of service in X.509 name checks

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6119

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-09-03 16:15 修改: 2024-09-03 21:35
busybox-binsh CVE-2023-42364 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
libxml2 CVE-2024-34459 中危 2.11.4-r0 2.11.8-r0 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:546b3e7565f0bb04ab683ac44d312a44ab23d9225a468c57a1ed5c2bf3a9bf3e

发布日期: 2024-05-14 15:39 修改: 2024-08-22 18:35
busybox-binsh CVE-2023-42365 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
busybox-binsh CVE-2023-42366 中危 1.36.1-r2 1.36.1-r6 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
ssl_client CVE-2023-42363 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free in awk

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42363

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 22:15 修改: 2023-11-30 05:06
ssl_client CVE-2023-42364 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42364

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2024-10-11 21:36
ssl_client CVE-2023-42365 中危 1.36.1-r2 1.36.1-r7 busybox: use-after-free

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42365

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
ssl_client CVE-2023-42366 中危 1.36.1-r2 1.36.1-r6 busybox: A heap-buffer-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42366

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2023-11-27 23:15 修改: 2023-11-30 05:08
libcrypto3 CVE-2024-9143 低危 3.1.2-r0 3.1.7-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
libcrypto3 CVE-2024-2511 低危 3.1.2-r0 3.1.4-r6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-2511 低危 3.1.2-r0 3.1.4-r6 openssl: Unbounded memory growth with session handling in TLSv1.3

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl3 CVE-2024-9143 低危 3.1.2-r0 3.1.7-r1 openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143

镜像层: sha256:4693057ce2364720d39e57e85a5b8e0bd9ac3573716237736d6470ec5b7b7230

发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
Python (python-pkg)
低危漏洞:2 中危漏洞:9 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
cryptography CVE-2023-50782 高危 41.0.3 42.0.0 python-cryptography: Bleichenbacher timing oracle attack against RSA decryption - incomplete fix for CVE-2020-25659

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50782

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2024-02-05 21:15 修改: 2024-09-27 19:15
cryptography CVE-2024-26130 高危 41.0.3 42.0.4 python-cryptography: NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26130

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2024-02-21 17:15 修改: 2024-02-22 19:07
setuptools CVE-2024-6345 高危 68.0.0 70.0.0 pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
cryptography CVE-2024-0727 中危 41.0.3 42.0.2 openssl: denial of service via null dereference

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
cryptography GHSA-h4gh-qq45-vh27 中危 41.0.3 43.0.1 pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-h4gh-qq45-vh27

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
idna CVE-2024-3651 中危 3.4 3.7 python-idna: potential DoS via resource consumption via specially crafted inputs to idna.encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-3651

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2024-07-07 18:15 修改: 2024-07-11 14:58
pip CVE-2023-5752 中危 23.2.1 23.3 pip: Mercurial configuration injectable in repo revision when installing via pip

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752

镜像层: sha256:08928985481f34cf9612e3c14bcce2388ec0e3d25ac49f407f75ce364358cac9

发布日期: 2023-10-25 18:17 修改: 2024-06-10 18:15
requests CVE-2024-35195 中危 2.31.0 2.32.0 requests: subsequent requests to the same host ignore cert verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35195

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2024-05-20 21:15 修改: 2024-06-10 17:16
cryptography CVE-2023-49083 中危 41.0.3 41.0.6 python-cryptography: NULL-dereference when loading PKCS7 certificates

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-49083

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2023-11-29 19:15 修改: 2024-09-05 16:09
urllib3 CVE-2023-43804 中危 1.26.16 2.0.6, 1.26.17 python-urllib3: Cookie request header isn't stripped during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-43804

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2023-10-04 17:15 修改: 2024-02-01 00:55
urllib3 CVE-2023-45803 中危 1.26.16 2.0.7, 1.26.18 urllib3: Request body not stripped after redirect from 303 status changes request method to GET

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45803

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2023-10-17 20:15 修改: 2023-11-03 22:15
urllib3 CVE-2024-37891 中危 1.26.16 1.26.19, 2.2.2 urllib3: proxy-authorization request header is not stripped during cross-origin redirects

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37891

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 2024-06-17 20:15 修改: 2024-06-20 12:44
cryptography GHSA-v8gr-m533-ghj9 低危 41.0.3 41.0.4 Vulnerable OpenSSL included in cryptography wheels

漏洞详情: https://github.com/advisories/GHSA-v8gr-m533-ghj9

镜像层: sha256:7abc873da370a242f26137eade3c55a0bd6cb18a6362907d29fc76f172c112e0

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
certifi CVE-2024-39689 低危 2023.7.22 2024.07.04 python-certifi: Remove root certificates from `GLOBALTRUST` from the root store

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-39689

镜像层: sha256:2db9f42ab1838c200f5399e151b10741c7782f85c7f0632fb6007be45f356700

发布日期: 2024-07-05 19:15 修改: 2024-07-08 15:49