docker.io/timberio/vector:0.56.0-distroless-libc linux/amd64

docker.io/timberio/vector:0.56.0-distroless-libc - Trivy安全扫描结果 扫描时间: 2026-06-18 16:14
全部漏洞信息
低危漏洞:19 中危漏洞:6 高危漏洞:1 严重漏洞:0

系统OS: debian 12.14 扫描引擎: Trivy 扫描时间: 2026-06-18 16:14

docker.io/timberio/vector:0.56.0-distroless-libc (debian 12.14) (debian)
低危漏洞:19 中危漏洞:6 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
libssl3 CVE-2026-45447 高危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-16 02:56
libc6 CVE-2026-5450 中危 2.36-9+deb12u14 glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc6 CVE-2026-5928 中危 2.36-9+deb12u14 glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2026-04-20 21:16 修改: 2026-04-23 15:33
libc6 CVE-2026-6238 中危 2.36-9+deb12u14 glibc: glibc: Application crash or uninitialized memory read via crafted DNS response

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2026-04-28 19:37 修改: 2026-05-04 17:57
libc6 CVE-2026-5435 中危 2.36-9+deb12u14 glibc: glibc: Out-of-bounds write via TSIG record processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2026-04-28 13:19 修改: 2026-05-05 17:38
libssl3 CVE-2026-34182 中危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-15 18:13
libssl3 CVE-2026-45445 中危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-16 02:57
libc6 CVE-2019-1010022 低危 2.36-9+deb12u14 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc6 CVE-2019-1010023 低危 2.36-9+deb12u14 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc6 CVE-2019-1010024 低危 2.36-9+deb12u14 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc6 CVE-2019-1010025 低危 2.36-9+deb12u14 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2019-07-15 04:15 修改: 2024-11-21 04:17
libc6 CVE-2019-9192 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2019-02-26 18:29 修改: 2024-11-21 04:51
libgcc-s1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:c3abae442368dc447f15c468933843c361f227f5d87b2bb86515b49f40583ed9

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56
libgomp1 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:2401c5ea32a75452bc4b02a664c80cf63f197704653926fca19e22e6cbc85652

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56
gcc-12-base CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:7095412417d2dce289b77f7a8c632a07c82b707fe43cfef7368c3b65c8d2538a

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56
libc6 CVE-2010-4756 低危 2.36-9+deb12u14 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6 CVE-2018-20796 低危 2.36-9+deb12u14 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:99847da578ef1f84f359a90a17b0953d2f96d90438e4bcbbf29f5e571d27b558

发布日期: 2019-02-26 02:29 修改: 2024-11-21 04:02
libssl3 CVE-2025-27587 低危 3.0.20-1~deb12u1 OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2025-06-16 22:15 修改: 2026-04-15 00:35
libssl3 CVE-2026-34180 低危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-15 18:13
libssl3 CVE-2026-42766 低危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-15 18:25
libssl3 CVE-2026-42767 低危 3.0.20-1~deb12u1 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-16 02:58
libssl3 CVE-2026-42770 低危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-16 02:58
libssl3 CVE-2026-45446 低危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-16 02:57
libssl3 CVE-2026-7383 低危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-16 02:46
libssl3 CVE-2026-9076 低危 3.0.20-1~deb12u1 3.0.20-1~deb12u2 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:2821dc8c96f347ebcc2b147d7880755e0c680ac083887926f23c23a67f3443ba

发布日期: 2026-06-09 17:17 修改: 2026-06-16 02:45
libstdc++6 CVE-2022-27943 低危 12.2.0-14+deb12u1 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:6819a1af097df543d58dc30b51f737e55f3f42a9a04e641f175834a55bf0629c

发布日期: 2022-03-26 13:15 修改: 2024-11-21 06:56