ghcr.io/alibaba/loongcollector:3.3.5 linux/amd64

ghcr.io/alibaba/loongcollector:3.3.5 - Trivy安全扫描结果 扫描时间: 2026-09-11 09:29
全部漏洞信息
低危漏洞:57 中危漏洞:34 高危漏洞:3 严重漏洞:0

系统OS: ubuntu 25.10 扫描引擎: Trivy 扫描时间: 2026-09-11 09:29

ghcr.io/alibaba/loongcollector:3.3.5 (ubuntu 25.10) (ubuntu)
低危漏洞:57 中危漏洞:34 高危漏洞:3 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
gpgv CVE-2025-68973 高危 2.4.8-2ubuntu2 2.4.8-2ubuntu2.1 GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59

libssl3t64 CVE-2026-45447 高危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-09-07 13:20

openssl-provider-legacy CVE-2026-45447 高危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-09-07 13:20

libc-bin CVE-2026-0861 中危 2.42-0ubuntu3 2.42-0ubuntu3.1 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc-bin CVE-2026-0915 中危 2.42-0ubuntu3 2.42-0ubuntu3.1 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libc6 CVE-2025-15281 中危 2.42-0ubuntu3 2.42-0ubuntu3.1 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

libc6 CVE-2026-0861 中危 2.42-0ubuntu3 2.42-0ubuntu3.1 glibc: Integer overflow in memalign leads to heap corruption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11

libc6 CVE-2026-0915 中危 2.42-0ubuntu3 2.42-0ubuntu3.1 glibc: glibc: Information disclosure via zero-valued network query

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11

libcap2 CVE-2026-4878 中危 1:2.75-7ubuntu2 1:2.75-7ubuntu2.2 libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4878

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-09 16:16 修改: 2026-09-09 13:20

libgcrypt20 CVE-2026-41989 中危 1.11.0-7build1 1.11.0-7ubuntu0.1 Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41989

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-23 05:16 修改: 2026-07-14 13:18

libsqlite3-0 CVE-2026-11822 中危 3.46.1-8 3.46.1-8ubuntu0.1 sqlite: SQLite: Arbitrary code execution via crafted FTS5 full-text search data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11822

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

libsqlite3-0 CVE-2026-11824 中危 3.46.1-8 3.46.1-8ubuntu0.1 sqlite: SQLite: Arbitrary code execution and crash via heap-based buffer overflow in FTS5

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11824

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 20:16 修改: 2026-07-23 09:10

dpkg CVE-2026-2219 中危 1.22.21ubuntu3.1 1.22.21ubuntu3.2 It was discovered that dpkg-deb (a component of dpkg, the Debian packa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2219

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-07 09:16 修改: 2026-06-17 10:30

libssl3t64 CVE-2025-11187 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29

libssl3t64 CVE-2025-15467 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17

libssl3t64 CVE-2026-31790 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-34182 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-34183 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42764 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-45445 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libsystemd0 CVE-2026-29111 中危 257.9-0ubuntu2 257.9-0ubuntu2.3 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libsystemd0 CVE-2026-40225 中危 257.9-0ubuntu2 257.9-0ubuntu2.3 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libsystemd0 CVE-2026-40226 中危 257.9-0ubuntu2 257.9-0ubuntu2.5 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-29111 中危 257.9-0ubuntu2 257.9-0ubuntu2.3 systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29

libudev1 CVE-2026-40225 中危 257.9-0ubuntu2 257.9-0ubuntu2.3 systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libudev1 CVE-2026-40226 中危 257.9-0ubuntu2 257.9-0ubuntu2.5 systemd: systemd nspawn: Escape-to-host action via crafted config file

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44

libc-bin CVE-2025-15281 中危 2.42-0ubuntu3 2.42-0ubuntu3.1 glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37

openssl-provider-legacy CVE-2025-11187 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-11187

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:29

openssl-provider-legacy CVE-2025-15467 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Remote code execution or Denial of Service via oversized Initialization Vector in CMS parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15467

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-09-07 13:17

openssl-provider-legacy CVE-2026-31790 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31790

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-provider-legacy CVE-2026-34182 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: CMS AuthEnvelopedData Processing May Accept Forged Messages

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34182

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-34183 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Unbounded Memory Growth in the QUIC PATH_CHALLENGE Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34183

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-42764 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: NULL pointer dereference in QUIC server initial packet handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42764

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-45445 中危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: AES-OCB IV Ignored on EVP_Cipher() Path

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45445

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

perl-base CVE-2026-42496 中危 5.40.1-6build1 5.40.1-6ubuntu0.1 perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10

perl-base CVE-2026-8376 中危 5.40.1-6build1 5.40.1-6ubuntu0.1 perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-05-26 00:16 修改: 2026-09-08 22:19

sed CVE-2026-5958 中危 4.9-2build2 4.9-2ubuntu0.25.10.1 sed: GNU sed TOCTOU race condition

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59

libssl3t64 CVE-2026-31789 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-34180 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-34181 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42766 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42767 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42768 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42769 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-42770 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-45446 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-7383 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-9076 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

liblzma5 CVE-2026-34743 低危 5.8.1-1build2 5.8.1-1ubuntu0.1 xz: XZ Utils: Denial of Service via buffer overflow in index decoding

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10

libncursesw6 CVE-2025-69720 低危 6.5+20250216-2build1 6.5+20250216-2ubuntu0.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-15468 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

libtinfo6 CVE-2025-69720 低危 6.5+20250216-2build1 6.5+20250216-2ubuntu0.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-15469 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

libssl3t64 CVE-2025-66199 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56

libssl3t64 CVE-2025-68160 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

ncurses-base CVE-2025-69720 低危 6.5+20250216-2build1 6.5+20250216-2ubuntu0.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

ncurses-bin CVE-2025-69720 低危 6.5+20250216-2build1 6.5+20250216-2ubuntu0.1 ncurses: ncurses: Buffer overflow vulnerability may lead to arbitrary code execution.

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69720

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-19 15:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69418 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69419 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69420 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2025-69421 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

libssl3t64 CVE-2026-22795 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3t64 CVE-2026-22796 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

libssl3t64 CVE-2026-2673 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31

libssl3t64 CVE-2026-28387 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-provider-legacy CVE-2025-15468 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via NULL pointer dereference in QUIC protocol handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15468

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

openssl-provider-legacy CVE-2025-15469 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Data integrity bypass in `openssl dgst` command due to silent truncation

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15469

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 08:37

openssl-provider-legacy CVE-2025-66199 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service due to excessive memory allocation in TLS 1.3 certificate compression

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66199

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:56

openssl-provider-legacy CVE-2025-68160 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58

openssl-provider-legacy CVE-2025-69418 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-provider-legacy CVE-2025-69419 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-provider-legacy CVE-2025-69420 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via malformed TimeStamp Response

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-provider-legacy CVE-2025-69421 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00

openssl-provider-legacy CVE-2026-22795 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl-provider-legacy CVE-2026-22796 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3 openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20

openssl-provider-legacy CVE-2026-2673 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-2673

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-03-13 19:54 修改: 2026-06-17 10:31

openssl-provider-legacy CVE-2026-28387 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-provider-legacy CVE-2026-28388 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-provider-legacy CVE-2026-28389 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-provider-legacy CVE-2026-28390 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-provider-legacy CVE-2026-31789 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Heap buffer overflow on 32-bit systems from large X.509 certificate processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-31789

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

openssl-provider-legacy CVE-2026-34180 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure.

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-34181 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: PKCS#12 Files with PBMAC1 Are Accepted with Short HMAC Keys

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34181

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-42766 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Possible NULL Dereference in Password-Based CMS Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-42767 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: NULL Pointer Dereference in CRMF EncryptedValue Decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42767

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-42768 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42768

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-42769 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Trust-Anchor Substitution via cert/issuer Typo in CMP rootCaKeyUpdate

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42769

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-42770 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: FFC-DH Peer Validation Uses Attacker-Supplied q

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42770

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-45446 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: Incorrect Tag Processing for Empty Messages in AES-GCM-SIV and AES-SIV modes

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45446

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-7383 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

openssl-provider-legacy CVE-2026-9076 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.4 openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10

libssl3t64 CVE-2026-28388 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-28389 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Denial of Service vulnerability in CMS processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

libssl3t64 CVE-2026-28390 低危 3.5.3-1ubuntu2 3.5.3-1ubuntu3.3 openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390

镜像层: sha256:f3e19efe7a6e0d7ab914ba1ee295a0e04c1da384b50879a9cad95057a6f6473a

发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10

检测到您正在使用广告拦截插件,本站为公益站点,依赖广告维持运转 🙏 查看如何关闭 ×