docker.io/tomcat:9.0.120-jdk8-temurin-noble linux/amd64

docker.io/tomcat:9.0.120-jdk8-temurin-noble - Trivy安全扫描结果扫描时间: 2026-08-10 10:19

全部漏洞信息

低危漏洞:6

中危漏洞:12

高危漏洞:0

严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-10 10:19

docker.io/tomcat:9.0.120-jdk8-temurin-noble (ubuntu 24.04) (ubuntu)

低危漏洞:6

中危漏洞:12

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
bsdutils	CVE-2026-27456	中危	1:2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libexpat1	CVE-2025-66382	中危	2.6.1-2ubuntu0.4		libexpat: libexpat: Denial of service via crafted file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382 镜像层: sha256:bc11db4f559726b38edfe3b1f8db2654a59bf38b7e172601c1d4935fa4d5ed3f 发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libmount1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libp11-kit0	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
libsmartcols1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
p11-kit	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:bc11db4f559726b38edfe3b1f8db2654a59bf38b7e172601c1d4935fa4d5ed3f 发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
p11-kit-modules	CVE-2026-13757	中危	0.25.3-4ubuntu2.1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:bc11db4f559726b38edfe3b1f8db2654a59bf38b7e172601c1d4935fa4d5ed3f 发布日期: 2026-06-29 19:16 修改: 2026-08-03 22:16
util-linux	CVE-2026-27456	中危	2.39.3-9ubuntu6.5		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
wget	CVE-2021-31879	中危	1.21.4-1ubuntu4.4		wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:bc11db4f559726b38edfe3b1f8db2654a59bf38b7e172601c1d4935fa4d5ed3f 发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
libudev1	CVE-2026-40228	低危	255.4-1ubuntu8.16		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libgcrypt20	CVE-2024-2236	低危	1.10.3-2ubuntu0.1		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
passwd	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
login	CVE-2024-56433	低危	1:4.13+dfsg1-4ubuntu3.2		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsystemd0	CVE-2026-40228	低危	255.4-1ubuntu8.16		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
zlib1g	CVE-2026-27171	低危	1:1.3.dfsg-3.1ubuntu2.1		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26

Java (jar)

低危漏洞:0

中危漏洞:0

高危漏洞:0

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息