docker.io/webgoat/webgoat:2026 linux/amd64

docker.io/webgoat/webgoat:2026 - Trivy安全扫描结果 扫描时间: 2026-09-03 15:20
全部漏洞信息
低危漏洞:34 中危漏洞:145 高危漏洞:22 严重漏洞:1

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-09-03 15:20

docker.io/webgoat/webgoat:2026 (ubuntu 24.04) (ubuntu)
低危漏洞:34 中危漏洞:126 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
binutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-common CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-common CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-common CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
binutils-x86-64-linux-gnu CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
bsdutils CVE-2026-13595 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
bsdutils CVE-2026-53612 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53613 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53614 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
bsdutils CVE-2026-53615 中危 1:2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
diffutils CVE-2026-53910 中危 1:3.10-1build1 1:3.10-1ubuntu0.1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
libattr1 CVE-2026-54371 中危 1:2.5.2-1build1.1 1:2.5.2-1ubuntu0.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 14:16 修改: 2026-09-01 13:19
libbinutils CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libbinutils CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libbinutils CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libbinutils CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libblkid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libblkid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libblkid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libctf-nobfd0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf-nobfd0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libctf0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libctf0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libgprofng0 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libgprofng0 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libmount1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libmount1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libmount1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
libp11-kit0 CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
libsframe1 CVE-2025-69644 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted binary with malformed DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69644

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69645 中危 2.42-4ubuntu2.10 binutils: Binutils objdump: Denial of Service via crafted DWARF debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69645

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69646 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via malformed DWARF debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69646

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69647 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF loclists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69647

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69648 中危 2.42-4ubuntu2.10 binutils: infinite loop in readelf via crafted binary with malformed DWARF .debug_rnglists data

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69648

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-09 15:15 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69651 中危 2.42-4ubuntu2.10 binutils: Binutils: Denial of Service via crafted ELF binary processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69651

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 18:16 修改: 2026-06-17 10:00
libsframe1 CVE-2025-69652 中危 2.42-4ubuntu2.10 binutils: abort in readelf via crafted ELF binary with malformed DWARF abbrev or debug information

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69652

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-03-06 19:16 修改: 2026-06-17 10:00
libsmartcols1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libsmartcols1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libsmartcols1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3t64 CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libsystemd0 CVE-2026-15059 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libsystemd0 CVE-2026-16742 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libudev1 CVE-2026-15059 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd: systemd-oomd: Unprivileged users can terminate arbitrary processes via IPC API

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libudev1 CVE-2026-16742 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-09-01 20:54
libuuid1 CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libuuid1 CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libuuid1 CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
mount CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
p11-kit CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
p11-kit CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
p11-kit-modules CVE-2026-13757 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-06-29 19:16 修改: 2026-09-01 13:18
p11-kit-modules CVE-2026-18938 中危 0.25.3-4ubuntu2.1 0.25.3-4ubuntu2.2 p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
perl-base CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-base CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
perl-base CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-03 17:16 修改: 2026-09-01 15:17
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-03 16:16 修改: 2026-09-01 15:17
util-linux CVE-2026-13595 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: heap use-after-free in libblkid nested partition probing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 09:16 修改: 2026-08-31 18:17
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
util-linux CVE-2026-53612 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program when applying post-mount ownership/mode changes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53612

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53613 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53614 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 util-linux: util-linux: SUID mount(8) allows nosuid/noexec bypass via LIBMOUNT_FORCE_MOUNT2

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53614

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
util-linux CVE-2026-53615 中危 2.39.3-9ubuntu6.5 2.39.3-9ubuntu6.6 [Integer Overflow or Wraparound in libblkid/src/partitions/dos.c]

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgprofng0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libgprofng0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
binutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libbinutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
ncurses-base CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
ncurses-bin CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libbinutils CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
binutils CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
openssl CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
openssl CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
libctf0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libctf0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libssl3t64 CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
libssl3t64 CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-08-28 19:46
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64 CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2026-08-25 13:19 修改: 2026-09-01 19:17
libncursesw6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
binutils-common CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libtinfo6 CVE-2025-6141 低危 6.4+20240113-1ubuntu2.1 6.4+20240113-1ubuntu2.2 gnu-ncurses: ncurses Stack Buffer Overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6141

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-06-16 22:16 修改: 2026-06-17 10:01
libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 1.10.3-2ubuntu0.2 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
binutils-x86-64-linux-gnu CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
binutils-x86-64-linux-gnu CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libctf-nobfd0 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libctf-nobfd0 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
coreutils CVE-2025-5278 低危 9.4-3ubuntu6.2 9.4-3ubuntu6.3 coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2025-05-27 21:15 修改: 2026-09-01 12:17
binutils-common CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
libbz2-1.0 CVE-2026-42250 低危 1.0.8-5.1build0.1 1.0.8-5.1ubuntu0.1 bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libsframe1 CVE-2017-13716 低危 2.42-4ubuntu2.10 binutils: Memory leak with the C++ symbol demangler routine in libiberty

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-13716

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2017-08-28 21:29 修改: 2026-06-17 01:05
libsframe1 CVE-2025-1152 低危 2.42-4ubuntu2.10 binutils: GNU Binutils ld xstrdup.c xstrdup memory leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1152

镜像层: sha256:0684eae188a2afbc985d81ac2a425e17898e88d1e6aa16b86caad5afc91b46f7

发布日期: 2025-02-10 18:15 修改: 2026-06-17 08:38
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 1:1.3.dfsg-3.1ubuntu2.2 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:0 中危漏洞:19 高危漏洞:22 严重漏洞:1
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
com.thoughtworks.xstream:xstream CVE-2013-7285 严重 1.4.5 1.4.7, 1.4.11 XStream: remote code execution due to insecure XML deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-7285

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2019-05-15 17:29 修改: 2025-05-23 16:54
com.thoughtworks.xstream:xstream CVE-2016-3674 高危 1.4.5 1.4.9 XStream: enabled processing of external entities

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3674

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2016-05-17 14:08 修改: 2026-06-17 00:46
com.thoughtworks.xstream:xstream CVE-2017-7957 高危 1.4.5 1.4.10 XStream: DoS when unmarshalling void type

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7957

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2017-04-29 19:59 修改: 2026-06-17 01:25
com.thoughtworks.xstream:xstream CVE-2020-26217 高危 1.4.5 1.4.14-java7 XStream: remote code execution due to insecure XML deserialization when relying on blocklists

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26217

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2020-11-16 21:15 修改: 2026-06-17 03:07
com.thoughtworks.xstream:xstream CVE-2021-21341 高危 1.4.5 1.4.16 XStream: allow a remote attacker to cause DoS only by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21341

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-29505 高危 1.4.5 1.4.17 XStream: remote command execution attack by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29505

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-05-28 21:15 修改: 2026-06-17 03:47
com.thoughtworks.xstream:xstream CVE-2021-39139 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39139

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39141 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39141

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39144 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of sun.tracing.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39144

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39145 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39145

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39146 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39146

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39147 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapSearchEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39147

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39148 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.toolkit.dir.ContextEnumerator

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39148

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39149 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.corba.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39149

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39150 高危 1.4.5 1.4.18 xstream: Server-side request forgery (SSRF) via unsafe deserialization of com.sun.xml.internal.ws.client.sei.*

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39150

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39151 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of com.sun.jndi.ldap.LdapBindingEnumeration

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39151

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39152 高危 1.4.5 1.4.18 xstream: Server-side request forgery (SSRF) via unsafe deserialization of jdk.nashorn.internal.runtime.Source$URLData

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39152

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39153 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of Xalan xsltc.trax.TemplatesImpl

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39153

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-39154 高危 1.4.5 1.4.18 xstream: Arbitrary code execution via unsafe deserialization of javax.swing.UIDefaults$ProxyLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39154

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 18:15 修改: 2026-06-17 04:03
com.thoughtworks.xstream:xstream CVE-2021-43859 高危 1.4.5 1.4.19 xstream: Injecting highly recursive collections or maps can cause a DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43859

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2022-02-01 12:15 修改: 2026-06-17 04:11
com.thoughtworks.xstream:xstream CVE-2022-40151 高危 1.4.5 1.4.20 xstream: Xstream to serialise XML data was vulnerable to Denial of Service attacks

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40151

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2022-09-16 10:15 修改: 2026-06-17 05:01
com.thoughtworks.xstream:xstream CVE-2022-41966 高危 1.4.5 1.4.20 xstream: Denial of Service by injecting recursive collections or maps based on element's hash values raising a stack overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41966

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2022-12-28 00:15 修改: 2026-06-17 05:04
com.thoughtworks.xstream:xstream CVE-2024-47072 高危 1.4.5 1.4.21 com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-47072

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2024-11-08 00:15 修改: 2026-06-17 07:56
com.fasterxml.jackson.core:jackson-databind GHSA-mhm7-754m-9p8w 中危 2.21.4 2.18.9, 2.21.5 jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`

漏洞详情: https://github.com/advisories/GHSA-mhm7-754m-9p8w

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2026-07-21 19:40 修改: 2026-07-21 19:40
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.21.4 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.21.4 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
com.thoughtworks.xstream:xstream CVE-2020-26258 中危 1.4.5 1.4.15 XStream: Server-Side Forgery Request vulnerability can be activated when unmarshalling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26258

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2020-12-16 01:15 修改: 2026-06-17 03:07
com.thoughtworks.xstream:xstream CVE-2020-26259 中危 1.4.5 1.4.15 XStream: arbitrary file deletion on the local host when unmarshalling

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-26259

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2020-12-16 01:15 修改: 2026-06-17 03:07
com.thoughtworks.xstream:xstream CVE-2021-21342 中危 1.4.5 1.4.16 XStream: SSRF via crafted input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21342

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21343 中危 1.4.5 1.4.16 XStream: arbitrary file deletion on the local host via crafted input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21343

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21344 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of javax.sql.rowset.BaseRowSet

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21344

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21345 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of com.sun.corba.se.impl.activation.ServerTableEntry

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21345

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21346 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of sun.swing.SwingLazyValue

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21346

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21347 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of com.sun.tools.javac.processing.JavacProcessingEnvironment NameProcessIterator

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21347

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21348 中危 1.4.5 1.4.16 XStream: ReDoS vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21348

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21349 中危 1.4.5 1.4.16 XStream: SSRF can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21349

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21350 中危 1.4.5 1.4.16 XStream: Unsafe deserizaliation of com.sun.org.apache.bcel.internal.util.ClassLoader

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21350

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-21351 中危 1.4.5 1.4.16 XStream: allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-21351

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-03-23 00:15 修改: 2026-06-17 03:35
com.thoughtworks.xstream:xstream CVE-2021-39140 中危 1.4.5 1.4.18 xstream: Infinite loop DoS via unsafe deserialization of sun.reflect.annotation.AnnotationInvocationHandler

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-39140

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2021-08-23 19:15 修改: 2026-06-17 04:03
org.apache.commons:commons-lang3 CVE-2025-48924 中危 3.14.0 3.18.0 commons-lang/commons-lang: org.apache.commons/commons-lang3: Uncontrolled Recursion vulnerability in Apache Commons Lang

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-48924

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2025-07-11 15:15 修改: 2026-06-17 09:30
org.apache.logging.log4j:log4j-api CVE-2026-49844 中危 2.25.4 2.25.5, 2.26.1 org.apache.logging.log4j/log4j-api: Apache Log4j API: Malformed JSON output due to improper encoding of floating-point values

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-49844

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2026-07-10 22:16 修改: 2026-07-14 20:03
tools.jackson.core:jackson-databind CVE-2026-59889 中危 3.1.4 3.1.5, 3.2.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:19afbc8f1b679c1ee6ab8094d8f051dd013ce947d46ccd7e9856ff486bb25bd2

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×