ghcr.io/biosoft-self/edta-docker:main linux/amd64

ghcr.io/biosoft-self/edta-docker:main - Trivy安全扫描结果 扫描时间: 2024-12-20 01:15
全部漏洞信息
低危漏洞:192 中危漏洞:88 高危漏洞:53 严重漏洞:5

系统OS: debian 12.8 扫描引擎: Trivy 扫描时间: 2024-12-20 01:15

ghcr.io/biosoft-self/edta-docker:main (debian 12.8) (debian)
低危漏洞:187 中危漏洞:64 高危漏洞:20 严重漏洞:2
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
wget CVE-2024-38428 严重 1.21.3-1+b2 wget: Misinterpretation of input may lead to improper behavior

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38428

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-06-16 03:15 修改: 2024-10-28 21:35

zlib1g CVE-2023-45853 严重 1:1.2.13.dfsg-1 zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-10-14 02:15 修改: 2024-08-01 13:44

libgssapi-krb5-2 CVE-2024-26462 高危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09

libharfbuzz0b CVE-2023-25193 高危 6.0.0+dfsg-3 harfbuzz: allows attackers to trigger O(n^2) growth via consecutive marks

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25193

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-02-04 20:15 修改: 2023-11-07 04:08

libk5crypto3 CVE-2024-26462 高危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09

libkrb5-3 CVE-2024-26462 高危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09

libkrb5support0 CVE-2024-26462 高危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/kdc/ndr.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26462

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09

libldap-2.5-0 CVE-2023-2953 高危 2.5.13+dfsg-5 openldap: null pointer dereference in ber_memalloc_x function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-05-30 22:15 修改: 2023-08-02 16:46

libperl5.36 CVE-2023-31484 高危 5.36.0-7+deb12u1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43

libpython3.11-minimal CVE-2024-7592 高危 3.11.2-6+deb12u4 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15

libpython3.11-stdlib CVE-2024-7592 高危 3.11.2-6+deb12u4 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15

libtiff6 CVE-2023-52355 高危 4.5.0-6+deb12u1 libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52355

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-01-25 20:15 修改: 2024-05-17 17:37

libtiff6 CVE-2023-52356 高危 4.5.0-6+deb12u1 libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52356

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-01-25 20:15 修改: 2024-09-16 20:15

libtiff6 CVE-2024-7006 高危 4.5.0-6+deb12u1 libtiff: NULL pointer dereference in tif_dirinfo.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7006

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-08-12 13:38 修改: 2024-11-06 10:15

libxml2 CVE-2024-25062 高危 2.9.14+dfsg-1.3~deb12u1 libxml2: use-after-free in XMLReader

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-02-04 16:15 修改: 2024-02-13 00:40

perl CVE-2023-31484 高危 5.36.0-7+deb12u1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43

perl-base CVE-2023-31484 高危 5.36.0-7+deb12u1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43

perl-modules-5.36 CVE-2023-31484 高危 5.36.0-7+deb12u1 perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43

python3.11 CVE-2024-7592 高危 3.11.2-6+deb12u4 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15

python3.11-minimal CVE-2024-7592 高危 3.11.2-6+deb12u4 cpython: python: Uncontrolled CPU resource consumption when in http.cookies module

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15

libexpat1 CVE-2023-52425 高危 2.5.0-1+deb12u1 expat: parsing large tokens can trigger a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-04 20:15 修改: 2024-08-26 20:35

libglib2.0-0 CVE-2024-52533 高危 2.74.6-2+deb12u4 glib: buffer overflow in set_connect_msg()

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52533

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-11-11 23:15 修改: 2024-12-06 14:15

libcurl3-gnutls CVE-2024-9681 中危 7.88.1-10+deb12u8 curl: HSTS subdomain overwrites parent cache entry

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9681

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-11-06 08:15 修改: 2024-12-13 14:15

libavahi-client3 CVE-2023-38469 中危 0.8-10 avahi: Reachable assertion in avahi_dns_packet_append_record

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38469

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libexpat1 CVE-2024-50602 中危 2.5.0-1+deb12u1 libexpat: expat: DoS via XML_ResumeParser

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-10-27 05:15 修改: 2024-10-30 18:35

libgcrypt20 CVE-2024-2236 中危 1.10.1-3 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-03-06 22:15 修改: 2024-11-12 18:15

libavahi-client3 CVE-2023-38470 中危 0.8-10 avahi: Reachable assertion in avahi_escape_label

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38470

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libavahi-client3 CVE-2023-38471 中危 0.8-10 avahi: Reachable assertion in dbus_set_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38471

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libavahi-client3 CVE-2023-38472 中危 0.8-10 avahi: Reachable assertion in avahi_rdata_parse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38472

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libavahi-client3 CVE-2023-38473 中危 0.8-10 avahi: Reachable assertion in avahi_alternative_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38473

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 16:15 修改: 2023-11-09 17:46

libavahi-client3 CVE-2024-52615 中危 0.8-10 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-21 21:15 修改: 2024-11-21 21:15

libavahi-client3 CVE-2024-52616 中危 0.8-10 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-21 21:15 修改: 2024-11-21 21:15

libavahi-common-data CVE-2023-38469 中危 0.8-10 avahi: Reachable assertion in avahi_dns_packet_append_record

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38469

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libncursesw6 CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15

libnss3 CVE-2023-5388 中危 2:3.87.1-1+deb12u1 nss: timing attack against RSA decryption

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5388

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-19 12:15 修改: 2024-11-14 22:35

libnss3 CVE-2023-6135 中危 2:3.87.1-1+deb12u1 nss: vulnerable to Minerva side-channel information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6135

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-12-19 14:15 修改: 2024-01-07 11:15

libnss3 CVE-2024-7531 中危 2:3.87.1-1+deb12u1 mozilla: nss: PK11_Encrypt using CKM_CHACHA20 can reveal plaintext on Intel Sandy Bridge machines

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7531

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-08-06 13:15 修改: 2024-10-30 21:35

libpam-modules CVE-2024-10041 中危 1.5.2-6+deb12u1 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15

libpam-modules CVE-2024-22365 中危 1.5.2-6+deb12u1 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27

libpam-modules-bin CVE-2024-10041 中危 1.5.2-6+deb12u1 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15

libpam-modules-bin CVE-2024-22365 中危 1.5.2-6+deb12u1 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27

libpam-runtime CVE-2024-10041 中危 1.5.2-6+deb12u1 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15

libpam-runtime CVE-2024-22365 中危 1.5.2-6+deb12u1 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27

libpam0g CVE-2024-10041 中危 1.5.2-6+deb12u1 pam: libpam: Libpam vulnerable to read hashed password

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-10-23 14:15 修改: 2024-12-18 10:15

libpam0g CVE-2024-22365 中危 1.5.2-6+deb12u1 pam: allowing unprivileged user to block another user namespace

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27

libavahi-common-data CVE-2023-38470 中危 0.8-10 avahi: Reachable assertion in avahi_escape_label

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38470

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libavahi-common-data CVE-2023-38471 中危 0.8-10 avahi: Reachable assertion in dbus_set_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38471

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libpython3.11-minimal CVE-2023-27043 中危 3.11.2-6+deb12u4 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27

libpython3.11-minimal CVE-2024-6923 中危 3.11.2-6+deb12u4 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15

libpython3.11-minimal CVE-2024-9287 中危 3.11.2-6+deb12u4 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15

libavahi-common-data CVE-2023-38472 中危 0.8-10 avahi: Reachable assertion in avahi_rdata_parse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38472

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libpython3.11-stdlib CVE-2023-27043 中危 3.11.2-6+deb12u4 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27

libpython3.11-stdlib CVE-2024-6923 中危 3.11.2-6+deb12u4 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15

libpython3.11-stdlib CVE-2024-9287 中危 3.11.2-6+deb12u4 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15

libavahi-common-data CVE-2023-38473 中危 0.8-10 avahi: Reachable assertion in avahi_alternative_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38473

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 16:15 修改: 2023-11-09 17:46

libavahi-common-data CVE-2024-52615 中危 0.8-10 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-21 21:15 修改: 2024-11-21 21:15

libavahi-common-data CVE-2024-52616 中危 0.8-10 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-21 21:15 修改: 2024-11-21 21:15

libtiff6 CVE-2023-25433 中危 4.5.0-6+deb12u1 libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25433

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-29 20:15 修改: 2023-08-01 02:15

libtiff6 CVE-2023-26965 中危 4.5.0-6+deb12u1 libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26965

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-14 21:15 修改: 2023-08-01 02:15

libtiff6 CVE-2023-26966 中危 4.5.0-6+deb12u1 libtiff: Buffer Overflow in uv_encode()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26966

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-29 20:15 修改: 2023-08-01 02:15

libtiff6 CVE-2023-2908 中危 4.5.0-6+deb12u1 libtiff: null pointer dereference in tif_dir.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2908

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-30 22:15 修改: 2023-11-07 04:13

libtiff6 CVE-2023-3618 中危 4.5.0-6+deb12u1 libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3618

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-07-12 15:15 修改: 2024-03-23 11:15

libtiff6 CVE-2023-6277 中危 4.5.0-6+deb12u1 libtiff: Out-of-memory in TIFFOpen via a craft file

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6277

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-24 19:15 修改: 2024-09-17 01:15

libtinfo6 CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15

libavahi-common3 CVE-2023-38469 中危 0.8-10 avahi: Reachable assertion in avahi_dns_packet_append_record

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38469

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libxml2 CVE-2023-39615 中危 2.9.14+dfsg-1.3~deb12u1 libxml2: crafted xml can cause global buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-08-29 17:15 修改: 2024-08-02 19:15

libxml2 CVE-2023-45322 中危 2.9.14+dfsg-1.3~deb12u1 libxml2: use-after-free in xmlUnlinkNode() in tree.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-10-06 22:15 修改: 2024-08-02 21:15

login CVE-2023-4641 中危 1:4.13+dfsg1-1+b1 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15

ncurses-base CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15

ncurses-bin CVE-2023-50495 中危 6.4-4 ncurses: segmentation fault via _nc_wrap_entry()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15

passwd CVE-2023-4641 中危 1:4.13+dfsg1-1+b1 shadow-utils: possible password leak during passwd(1) change

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15

libavahi-common3 CVE-2023-38470 中危 0.8-10 avahi: Reachable assertion in avahi_escape_label

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38470

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libavahi-common3 CVE-2023-38471 中危 0.8-10 avahi: Reachable assertion in dbus_set_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38471

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libavahi-common3 CVE-2023-38472 中危 0.8-10 avahi: Reachable assertion in avahi_rdata_parse

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38472

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 15:15 修改: 2023-11-09 19:58

libavahi-common3 CVE-2023-38473 中危 0.8-10 avahi: Reachable assertion in avahi_alternative_host_name

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-38473

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 16:15 修改: 2023-11-09 17:46

python3.11 CVE-2023-27043 中危 3.11.2-6+deb12u4 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27

python3.11 CVE-2024-6923 中危 3.11.2-6+deb12u4 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15

python3.11 CVE-2024-9287 中危 3.11.2-6+deb12u4 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15

libavahi-common3 CVE-2024-52615 中危 0.8-10 avahi: Avahi Wide-Area DNS Uses Constant Source Port

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-21 21:15 修改: 2024-11-21 21:15

python3.11-minimal CVE-2023-27043 中危 3.11.2-6+deb12u4 python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27

python3.11-minimal CVE-2024-6923 中危 3.11.2-6+deb12u4 cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15

python3.11-minimal CVE-2024-9287 中危 3.11.2-6+deb12u4 python: Virtual environment (venv) activation scripts don't quote paths

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-10-22 17:15 修改: 2024-11-04 18:15

libavahi-common3 CVE-2024-52616 中危 0.8-10 avahi: Avahi Wide-Area DNS Predictable Transaction IDs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-21 21:15 修改: 2024-11-21 21:15

wget CVE-2021-31879 中危 1.21.3-1+b2 wget: authorization header disclosure on redirect

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2021-04-29 05:15 修改: 2022-05-13 20:52

wget CVE-2024-10524 中危 1.21.3-1+b2 wget: GNU Wget is vulnerable to an SSRF attack when accessing partially-user-controlled shorthand URLs

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10524

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-11-19 15:15 修改: 2024-11-19 21:57

libcurl3-gnutls CVE-2024-11053 中危 7.88.1-10+deb12u8 curl: curl netrc password leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11053

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-12-11 08:15 修改: 2024-12-15 17:15

libglapi-mesa CVE-2023-45931 低危 22.3.6-1+deb12u1 Mesa 23.0.4 was discovered to contain a NULL pointer dereference in ch ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45931

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 04:15 修改: 2024-09-04 15:35

libapparmor1 CVE-2016-1585 低危 3.0.8-3 In all versions of AppArmor mount rules are accidentally widened when ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-1585

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-04-22 16:29 修改: 2023-11-07 02:29

libglib2.0-0 CVE-2012-0039 低危 2.74.6-2+deb12u4 glib2: hash table collisions CPU usage DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-0039

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2012-01-14 17:55 修改: 2024-08-06 18:15

libglvnd0 CVE-2023-45924 低危 1.6.0-1 libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45924

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15

libglx-mesa0 CVE-2023-45913 低危 22.3.6-1+deb12u1 Mesa v23.0.4 was discovered to contain a NULL pointer dereference via ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45913

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 04:15 修改: 2024-11-07 12:35

libglx-mesa0 CVE-2023-45919 低危 22.3.6-1+deb12u1 Mesa 23.0.4 was discovered to contain a buffer over-read in glXQuerySe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45919

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15

libglx-mesa0 CVE-2023-45922 低危 22.3.6-1+deb12u1 glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45922

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-11-19 19:35

libglx-mesa0 CVE-2023-45931 低危 22.3.6-1+deb12u1 Mesa 23.0.4 was discovered to contain a NULL pointer dereference in ch ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45931

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 04:15 修改: 2024-09-04 15:35

libglx0 CVE-2023-45924 低危 1.6.0-1 libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45924

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15

libgnutls30 CVE-2011-3389 低危 3.7.9-2+deb12u3 HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST)

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2011-09-06 19:55 修改: 2022-11-29 15:56

libapt-pkg6.0 CVE-2011-3374 低危 2.6.1 It was found that apt-key in apt, all versions, do not correctly valid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08

libgssapi-krb5-2 CVE-2018-5709 低危 1.20.1-2+deb12u2 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libgssapi-krb5-2 CVE-2024-26458 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15

libgssapi-krb5-2 CVE-2024-26461 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35

apt CVE-2011-3374 低危 2.6.1 It was found that apt-key in apt, all versions, do not correctly valid ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08

libip4tc2 CVE-2012-2663 低危 1.8.9-2 iptables: --syn flag bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2014-02-15 14:57 修改: 2023-11-07 02:10

libjbig0 CVE-2017-9937 低危 2.1-6.1 libtiff: memory malloc failure in tif_jbig.c could cause DOS.

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9937

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-06-26 12:29 修改: 2023-11-07 02:50

bash TEMP-0841856-B18BAF 低危 5.2.15-2+b7 [Privilege escalation possible to other user than root]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libk5crypto3 CVE-2018-5709 低危 1.20.1-2+deb12u2 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libk5crypto3 CVE-2024-26458 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15

libk5crypto3 CVE-2024-26461 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35

bsdutils CVE-2022-0563 低危 1:2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

libkrb5-3 CVE-2018-5709 低危 1.20.1-2+deb12u2 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libkrb5-3 CVE-2024-26458 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15

libkrb5-3 CVE-2024-26461 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35

coreutils CVE-2016-2781 低危 9.1-1 coreutils: Non-privileged session can escape to the parent session in chroot

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32

libkrb5support0 CVE-2018-5709 低危 1.20.1-2+deb12u2 krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58

libkrb5support0 CVE-2024-26458 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-12-06 21:15

libkrb5support0 CVE-2024-26461 低危 1.20.1-2+deb12u2 krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35

coreutils CVE-2017-18018 低危 9.1-1 coreutils: race condition vulnerability in chown and chgrp

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2018-01-04 04:29 修改: 2018-01-19 15:46

libldap-2.5-0 CVE-2015-3276 低危 2.5.13+dfsg-5 openldap: incorrect multi-keyword mode cipherstring parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2015-12-07 20:59 修改: 2023-04-28 18:28

libldap-2.5-0 CVE-2017-14159 低危 2.5.13+dfsg-5 openldap: Privilege escalation via PID file manipulation

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2017-09-05 18:29 修改: 2022-06-13 19:18

libldap-2.5-0 CVE-2017-17740 低危 2.5.13+dfsg-5 openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2017-12-18 06:29 修改: 2022-06-13 19:10

libldap-2.5-0 CVE-2020-15719 低危 2.5.13+dfsg-5 openldap: Certificate validation incorrectly matches name against CN-ID

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2020-07-14 14:15 修改: 2022-05-12 15:01

libllvm15 CVE-2023-26924 低危 1:15.0.6-4+b1 llvm: mlir:: outlineSingleBlockRegion crashes with segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26924

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-03-27 22:15 修改: 2024-08-02 12:16

libllvm15 CVE-2023-29932 低危 1:15.0.6-4+b1 llvm: canonicalize pass crashed with segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29932

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-05-05 15:15 修改: 2023-05-11 18:02

libllvm15 CVE-2023-29933 低危 1:15.0.6-4+b1 llvm: one shot bufferize crashed with segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29933

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-05-05 15:15 修改: 2023-05-11 18:06

libllvm15 CVE-2023-29934 低危 1:15.0.6-4+b1 llvm: convert-scf-to-spirv Pass crashed with segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29934

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-05-05 15:15 修改: 2023-05-11 18:13

libllvm15 CVE-2023-29935 低危 1:15.0.6-4+b1 llvm: gpu-to-llvm Pass crashed with error message

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29935

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-05-05 15:15 修改: 2023-05-11 18:17

libllvm15 CVE-2023-29939 低危 1:15.0.6-4+b1 llvm-project commit a0138390 was discovered to contain a segmentation ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29939

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-05-05 15:15 修改: 2023-05-11 18:19

libllvm15 CVE-2023-29941 低危 1:15.0.6-4+b1 llvm: sparse-buffer-rewrite pass crashes with Segmentation fault

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29941

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-05-05 15:15 修改: 2023-11-07 04:11

libllvm15 CVE-2023-29942 低危 1:15.0.6-4+b1 llvm: convert-spirv-to-llvm Pass trigger Segmentation fault in LLVMStructType verifier

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29942

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-05-05 15:15 修改: 2023-05-11 18:23

libllvm15 CVE-2024-31852 低危 1:15.0.6-4+b1 llvm: LR register can be overwritten without data being saved to the stack on ARM

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-31852

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-04-05 15:15 修改: 2024-12-04 21:15

libllvm15 CVE-2024-7883 低危 1:15.0.6-4+b1 clang: CMSE secure state may leak from stack to floating-point registers

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7883

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-10-31 17:15 修改: 2024-11-01 12:57

libmount1 CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

gcc-12-base CVE-2022-27943 低危 12.2.0-14 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-03-26 13:15 修改: 2023-11-07 03:45

libnss-systemd CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

libnss-systemd CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libnss-systemd CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libnss-systemd CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

gcc-12-base CVE-2023-4039 低危 12.2.0-14 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15

libblkid1 CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

libc-bin CVE-2010-4756 低危 2.36-9+deb12u9 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15

libnss3 CVE-2017-11695 低危 2:3.87.1-1+deb12u1 nss: Heap-buffer-overflow in alloc_segs

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11695

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15

libnss3 CVE-2017-11696 低危 2:3.87.1-1+deb12u1 nss: Heap-buffer-overflow in __hash_open

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11696

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15

libnss3 CVE-2017-11697 低危 2:3.87.1-1+deb12u1 nss: Floating Point Exception in __hash_open

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11697

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15

libnss3 CVE-2017-11698 低危 2:3.87.1-1+deb12u1 nss: Heap-buffer-overflow in __get_page

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11698

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-12-27 19:29 修改: 2020-03-16 23:15

libc-bin CVE-2018-20796 低危 2.36-9+deb12u9 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56

libc-bin CVE-2019-1010022 低危 2.36-9+deb12u9 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc-bin CVE-2019-1010023 低危 2.36-9+deb12u9 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc-bin CVE-2019-1010024 低危 2.36-9+deb12u9 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc-bin CVE-2019-1010025 低危 2.36-9+deb12u9 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc-bin CVE-2019-9192 低危 2.36-9+deb12u9 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15

libpam-systemd CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

libpam-systemd CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libpam-systemd CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libpam-systemd CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libc6 CVE-2010-4756 低危 2.36-9+deb12u9 glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15

libc6 CVE-2018-20796 低危 2.36-9+deb12u9 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56

libc6 CVE-2019-1010022 低危 2.36-9+deb12u9 glibc: stack guard protection bypass

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libperl5.36 CVE-2011-4116 低危 5.36.0-7+deb12u1 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10

libperl5.36 CVE-2023-31486 低危 5.36.0-7+deb12u1 http-tiny: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-29 00:15 修改: 2024-11-29 12:15

libpixman-1-0 CVE-2023-37769 低危 0.42.2-1 stress-test master commit e4c878 was discovered to contain a FPE vulne ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-07-17 20:15 修改: 2023-07-28 13:22

libpng16-16 CVE-2021-4214 低危 1.6.39-2 libpng: hardcoded value leads to heap-overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4214

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-08-24 16:15 修改: 2022-11-08 02:32

libproc2-0 CVE-2023-4016 低危 2:4.0.2-3 procps: ps buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19

libc6 CVE-2019-1010023 低危 2.36-9+deb12u9 glibc: running ldd on malicious ELF leads to code execution because of wrong size computation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc6 CVE-2019-1010024 低危 2.36-9+deb12u9 glibc: ASLR bypass using cache of thread stack and heap

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc6 CVE-2019-1010025 低危 2.36-9+deb12u9 glibc: information disclosure of heap addresses of pthread_created thread

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15

libc6 CVE-2019-9192 低危 2.36-9+deb12u9 glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15

libpython3.11-minimal CVE-2024-11168 低危 3.11.2-6+deb12u4 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15

libcairo-gobject2 CVE-2017-7475 低危 1.16.0-7 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-05-19 20:29 修改: 2023-02-12 23:30

libcairo-gobject2 CVE-2018-18064 低危 1.16.0-7 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2018-10-08 18:29 修改: 2023-11-07 02:54

libcairo-gobject2 CVE-2019-6461 低危 1.16.0-7 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6461

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-01-16 18:29 修改: 2023-11-07 03:13

libcairo-gobject2 CVE-2019-6462 低危 1.16.0-7 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6462

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-01-16 18:29 修改: 2023-11-07 03:13

libpython3.11-stdlib CVE-2024-11168 低危 3.11.2-6+deb12u4 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15

libsmartcols1 CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

libsqlite3-0 CVE-2021-45346 低危 3.40.1-2+deb12u1 sqlite: crafted SQL query allows a malicious user to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2022-02-14 19:15 修改: 2024-08-04 05:15

libstdc++6 CVE-2022-27943 低危 12.2.0-14 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-03-26 13:15 修改: 2023-11-07 03:45

libstdc++6 CVE-2023-4039 低危 12.2.0-14 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15

libsystemd-shared CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

libsystemd-shared CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libsystemd-shared CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libsystemd-shared CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libsystemd0 CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

libsystemd0 CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libsystemd0 CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libsystemd0 CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libcairo2 CVE-2017-7475 低危 1.16.0-7 cairo: NULL pointer dereference with a crafted font file

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-05-19 20:29 修改: 2023-02-12 23:30

libcairo2 CVE-2018-18064 低危 1.16.0-7 cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2018-10-08 18:29 修改: 2023-11-07 02:54

libcairo2 CVE-2019-6461 低危 1.16.0-7 cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6461

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-01-16 18:29 修改: 2023-11-07 03:13

libcairo2 CVE-2019-6462 低危 1.16.0-7 cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6462

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-01-16 18:29 修改: 2023-11-07 03:13

libcups2 CVE-2014-8166 低危 2.4.2-3+deb12u8 cups: code execution via unescape ANSI escape sequences

漏洞详情: https://avd.aquasec.com/nvd/cve-2014-8166

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2018-01-12 17:29 修改: 2020-10-23 13:22

git CVE-2018-1000021 低危 1:2.39.5-0+deb12u1 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2018-02-09 23:29 修改: 2024-10-24 17:58

git CVE-2022-24975 低危 1:2.39.5-0+deb12u1 git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed"

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2022-02-11 20:15 修改: 2024-08-03 05:15

libcurl3-gnutls CVE-2024-2379 低危 7.88.1-10+deb12u8 curl: QUIC certificate check bypass with wolfSSL

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-03-27 08:15 修改: 2024-11-14 20:35

libelf1 CVE-2024-25260 低危 0.188-2.1 elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-02-20 18:15 修改: 2024-08-01 13:47

libtiff6 CVE-2017-16232 低危 4.5.0-6+deb12u1 libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16232

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-03-21 15:59 修改: 2024-08-05 21:15

libtiff6 CVE-2017-17973 低危 4.5.0-6+deb12u1 libtiff: heap-based use after free in tiff2pdf.c:t2p_writeproc

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17973

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-12-29 21:29 修改: 2024-08-05 21:15

libtiff6 CVE-2017-5563 低危 4.5.0-6+deb12u1 libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5563

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-01-23 07:59 修改: 2019-10-03 00:03

libtiff6 CVE-2017-9117 低危 4.5.0-6+deb12u1 libtiff: Heap-based buffer over-read in bmp2tiff

漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9117

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2017-05-21 19:29 修改: 2019-10-03 00:03

libtiff6 CVE-2018-10126 低危 4.5.0-6+deb12u1 libtiff: NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10126

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2018-04-21 21:29 修改: 2024-08-20 05:15

libtiff6 CVE-2022-1210 低危 4.5.0-6+deb12u1 tiff: Malicious file leads to a denial of service in TIFF File Handler

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1210

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-04-03 09:15 修改: 2023-07-24 13:46

libtiff6 CVE-2023-1916 低危 4.5.0-6+deb12u1 libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1916

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-04-10 22:15 修改: 2023-12-23 07:15

libtiff6 CVE-2023-3164 低危 4.5.0-6+deb12u1 libtiff: heap-buffer-overflow in extractImageSection()

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3164

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-02 12:15 修改: 2024-03-08 19:38

libtiff6 CVE-2023-6228 低危 4.5.0-6+deb12u1 libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6228

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-12-18 14:15 修改: 2024-10-11 16:15

git-man CVE-2018-1000021 低危 1:2.39.5-0+deb12u1 git: client prints server-sent ANSI escape codes to the terminal, allowing for unverified messages to potentially execute arbitrary commands

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-1000021

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2018-02-09 23:29 修改: 2024-10-24 17:58

libudev1 CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

libudev1 CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libudev1 CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libudev1 CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

libuuid1 CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

git-man CVE-2022-24975 低危 1:2.39.5-0+deb12u1 git: The --mirror option for git leaks secret for deleted content, aka the "GitBleed"

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24975

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2022-02-11 20:15 修改: 2024-08-03 05:15

libexpat1 CVE-2023-52426 低危 2.5.0-1+deb12u1 expat: recursive XML entity expansion vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-02-04 20:15 修改: 2024-03-07 17:15

libexpat1 CVE-2024-28757 低危 2.5.0-1+deb12u1 expat: XML Entity Expansion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-03-10 05:15 修改: 2024-05-01 19:15

libxml2 CVE-2024-34459 低危 2.9.14+dfsg-1.3~deb12u1 libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-05-14 15:39 修改: 2024-08-22 18:35

libfdisk1 CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

login CVE-2007-5686 低危 1:4.13+dfsg1-1+b1 initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45

login CVE-2023-29383 低危 1:4.13+dfsg1-1+b1 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05

login TEMP-0628843-DBAD28 低危 1:4.13+dfsg1-1+b1 [more related to CVE-2005-4890]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

mount CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

libgcc-s1 CVE-2022-27943 低危 12.2.0-14 binutils: libiberty/rust-demangle.c in GNU GCC 11.2 allows stack exhaustion in demangle_const

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27943

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-03-26 13:15 修改: 2023-11-07 03:45

libgcc-s1 CVE-2023-4039 低危 12.2.0-14 gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15

openssh-client CVE-2007-2243 低危 1:9.2p1-2+deb12u3 OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabl ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2243

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2007-04-25 16:19 修改: 2017-07-29 01:31

openssh-client CVE-2007-2768 低危 1:9.2p1-2+deb12u3 OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-2768

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2007-05-21 20:30 修改: 2021-04-01 15:32

openssh-client CVE-2008-3234 低危 1:9.2p1-2+deb12u3 sshd in OpenSSH 4 on Debian GNU/Linux, and the 20070303 OpenSSH snapsh ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2008-3234

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2008-07-18 16:41 修改: 2017-09-29 01:31

openssh-client CVE-2016-20012 低危 1:9.2p1-2+deb12u3 openssh: Public key information leak

漏洞详情: https://avd.aquasec.com/nvd/cve-2016-20012

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2021-09-15 20:15 修改: 2024-08-06 04:16

openssh-client CVE-2018-15919 低危 1:9.2p1-2+deb12u3 openssh: User enumeration via malformed packets in authentication requests

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-15919

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2018-08-28 08:29 修改: 2019-03-07 16:29

openssh-client CVE-2019-6110 低危 1:9.2p1-2+deb12u3 openssh: Acceptance and display of arbitrary stderr allows for spoofing of scp client output

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6110

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2019-01-31 18:29 修改: 2023-02-23 23:29

openssh-client CVE-2020-14145 低危 1:9.2p1-2+deb12u3 openssh: Observable discrepancy leading to an information leak in the algorithm negotiation

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-14145

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2020-06-29 18:15 修改: 2022-04-28 19:34

openssh-client CVE-2020-15778 低危 1:9.2p1-2+deb12u3 openssh: scp allows command injection when using backtick characters in the destination argument

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15778

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2020-07-24 14:15 修改: 2024-08-04 14:15

openssh-client CVE-2023-51767 低危 1:9.2p1-2+deb12u3 openssh: authentication bypass via row hammer attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-51767

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-12-24 07:15 修改: 2024-02-27 15:51

gpgv CVE-2022-3219 低危 2.2.40-1.1 gnupg: denial of service issue (resource consumption) using compressed packets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31

passwd CVE-2007-5686 低危 1:4.13+dfsg1-1+b1 initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45

passwd CVE-2023-29383 低危 1:4.13+dfsg1-1+b1 shadow: Improper input validation in shadow-utils package utility chfn

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05

passwd TEMP-0628843-DBAD28 低危 1:4.13+dfsg1-1+b1 [more related to CVE-2005-4890]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

libgcrypt20 CVE-2018-6829 低危 1.10.1-3 libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2018-02-07 23:29 修改: 2020-01-15 20:15

perl CVE-2011-4116 低危 5.36.0-7+deb12u1 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10

perl CVE-2023-31486 低危 5.36.0-7+deb12u1 http-tiny: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-29 00:15 修改: 2024-11-29 12:15

libgif7 CVE-2020-23922 低危 5.2.1-2.5 giflib: out-of-bounds read in DumpScreen2RGB() in gif2rgb.c in gif2rgb tool

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-23922

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-04-21 18:15 修改: 2023-11-07 03:19

perl-base CVE-2011-4116 低危 5.36.0-7+deb12u1 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10

perl-base CVE-2023-31486 低危 5.36.0-7+deb12u1 http-tiny: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2023-04-29 00:15 修改: 2024-11-29 12:15

libgif7 CVE-2021-40633 低危 5.2.1-2.5 A memory leak (out-of-memory) in gif2rgb in util/gif2rgb.c in giflib 5 ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-40633

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-06-14 11:15 修改: 2022-06-23 14:20

perl-modules-5.36 CVE-2011-4116 低危 5.36.0-7+deb12u1 perl: File:: Temp insecure temporary file handling

漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10

perl-modules-5.36 CVE-2023-31486 低危 5.36.0-7+deb12u1 http-tiny: insecure TLS cert default

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-04-29 00:15 修改: 2024-11-29 12:15

procps CVE-2023-4016 低危 2:4.0.2-3 procps: ps buffer overflow

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19

libgif7 CVE-2022-28506 低危 5.2.1-2.5 giflib: buffer overflow in function DumpScreen2RGB()

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28506

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-04-25 13:15 修改: 2023-11-07 03:45

libgif7 CVE-2023-39742 低危 5.2.1-2.5 giflib: segfault via getarg.c

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39742

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-08-25 14:15 修改: 2023-11-07 04:17

libgif7 CVE-2023-48161 低危 5.2.1-2.5 giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48161

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-11-22 06:15 修改: 2023-11-29 18:48

libgif7 CVE-2024-45993 低危 5.2.1-2.5 giflib: heap buffer overflow via gif2rgb

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45993

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-30 17:15 修改: 2024-10-04 13:51

python3.11 CVE-2024-11168 低危 3.11.2-6+deb12u4 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15

libgl1 CVE-2023-45924 低危 1.6.0-1 libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45924

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15

libgl1-mesa-dri CVE-2023-45913 低危 22.3.6-1+deb12u1 Mesa v23.0.4 was discovered to contain a NULL pointer dereference via ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45913

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 04:15 修改: 2024-11-07 12:35

libgl1-mesa-dri CVE-2023-45919 低危 22.3.6-1+deb12u1 Mesa 23.0.4 was discovered to contain a buffer over-read in glXQuerySe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45919

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15

libgl1-mesa-dri CVE-2023-45922 低危 22.3.6-1+deb12u1 glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45922

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-11-19 19:35

python3.11-minimal CVE-2024-11168 低危 3.11.2-6+deb12u4 python: Improper validation of IPv6 and IPvFuture addresses

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-11168

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-11-12 22:15 修改: 2024-12-03 21:15

systemd CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

systemd CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd-sysv CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

systemd-sysv CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd-sysv CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd-sysv CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd-timesyncd CVE-2013-4392 低危 252.31-1~deb12u1 systemd: TOCTOU race condition when updating file permissions and SELinux security contexts

漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49

systemd-timesyncd CVE-2023-31437 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify a seale ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd-timesyncd CVE-2023-31438 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can truncate a sea ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

systemd-timesyncd CVE-2023-31439 低危 252.31-1~deb12u1 An issue was discovered in systemd 253. An attacker can modify the con ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16

sysvinit-utils TEMP-0517018-A83CE6 低危 3.06-4 [sysvinit: no-root option in expert installer exposes locally exploitable security flaw]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tar CVE-2005-2541 低危 1.34+dfsg-1.2+deb12u1 tar: does not properly warn the user when extracting setuid or setgid files

漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2005-08-10 04:00 修改: 2023-11-07 01:57

tar TEMP-0290435-0B57B5 低危 1.34+dfsg-1.2+deb12u1 [tar's rmt command may have undesired side effects]

漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

unzip CVE-2021-4217 低危 6.0-28 unzip: Null pointer dereference in Unicode strings code

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4217

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-08-24 16:15 修改: 2022-11-29 15:45

util-linux CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

util-linux-extra CVE-2022-0563 低危 2.38.1-5+deb12u2 util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563

镜像层: sha256:c0f1022b22a9b36851b358f44e5475e39d166e71a8073cf53c894a299239b1c5

发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15

libgl1-mesa-dri CVE-2023-45931 低危 22.3.6-1+deb12u1 Mesa 23.0.4 was discovered to contain a NULL pointer dereference in ch ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45931

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 04:15 修改: 2024-09-04 15:35

libglapi-mesa CVE-2023-45913 低危 22.3.6-1+deb12u1 Mesa v23.0.4 was discovered to contain a NULL pointer dereference via ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45913

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 04:15 修改: 2024-11-07 12:35

libglapi-mesa CVE-2023-45919 低危 22.3.6-1+deb12u1 Mesa 23.0.4 was discovered to contain a buffer over-read in glXQuerySe ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45919

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15

libglapi-mesa CVE-2023-45922 低危 22.3.6-1+deb12u1 glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45922

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-27 05:15 修改: 2024-11-19 19:35

libsvn1 CVE-2024-46901 未知 1.14.2-4+b2 Insufficient validation of filenames against control characters in Apa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46901

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-12-09 10:15 修改: 2024-12-09 10:15

subversion CVE-2024-46901 未知 1.14.2-4+b2 Insufficient validation of filenames against control characters in Apa ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-46901

镜像层: sha256:5ed0bbc0adf51c834370c14fa345bfc247fe4019f7dcea8cd3a35949d05aae33

发布日期: 2024-12-09 10:15 修改: 2024-12-09 10:15

Conda (conda-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
Node.js (node-pkg)
低危漏洞:5 中危漏洞:16 高危漏洞:28 严重漏洞:3
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
json-schema CVE-2021-3918 严重 0.2.3 0.4.0 nodejs-json-schema: Prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3918

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-11-13 09:15 修改: 2023-02-03 19:15

minimist CVE-2021-44906 严重 0.0.8 1.2.6, 0.2.4 minimist: prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44906

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-03-17 16:15 修改: 2024-06-21 19:15

minimist CVE-2021-44906 严重 1.2.0 1.2.6, 0.2.4 minimist: prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44906

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-03-17 16:15 修改: 2024-06-21 19:15

decode-uri-component CVE-2022-38900 高危 0.2.0 0.2.1 decode-uri-component: improper input validation resulting in DoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-38900

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-11-28 13:15 修改: 2023-11-07 03:50

dot-prop CVE-2020-8116 高危 4.2.0 4.2.1, 5.1.1 nodejs-dot-prop: prototype pollution

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-8116

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-02-04 20:15 修改: 2022-08-05 19:32

fstream CVE-2019-13173 高危 1.0.11 1.0.12 nodejs-fstream: File overwrite in fstream.DirWriter() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-13173

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-07-02 20:15 修改: 2020-08-24 17:37

http-cache-semantics CVE-2022-25881 高危 3.8.1 4.1.1 http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25881

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-01-31 05:15 修改: 2023-11-07 03:44

ini CVE-2020-7788 高危 1.3.5 1.3.6 nodejs-ini: Prototype pollution via malicious INI file

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7788

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-12-11 11:15 修改: 2022-12-02 19:40

ip CVE-2024-29415 高危 1.1.5 node-ip: Incomplete fix for CVE-2023-42282

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-29415

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-05-27 20:15 修改: 2024-08-16 14:35

ansi-regex CVE-2021-3807 高危 3.0.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-09-17 07:15 修改: 2023-07-10 19:01

minimatch CVE-2022-3517 高危 3.0.4 3.0.5 nodejs-minimatch: ReDoS via the braceExpand function

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3517

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-10-17 20:15 修改: 2023-11-07 03:51

ansi-regex CVE-2021-3807 高危 3.0.0 6.0.1, 5.0.1, 4.1.1, 3.0.1 nodejs-ansi-regex: Regular expression denial of service (ReDoS) matching ANSI escape codes

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3807

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-09-17 07:15 修改: 2023-07-10 19:01

cross-spawn CVE-2024-21538 高危 5.1.0 7.0.5, 6.0.6 cross-spawn: regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-21538

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-08 05:15 修改: 2024-11-19 14:15

npm CVE-2019-16775 高危 6.9.0 6.13.3 npm: Symlink reference outside of node_modules folder through the bin field upon installation

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16775

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-12-13 01:15 修改: 2023-11-07 03:05

npm CVE-2019-16776 高危 6.9.0 6.13.3 npm: Arbitrary file write via constructed entry in the package.json bin field

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16776

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-12-13 01:15 修改: 2023-11-07 03:05

npm CVE-2019-16777 高危 6.9.0 6.13.4 npm: Global node_modules Binary Overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2019-16777

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-12-13 01:15 修改: 2023-11-07 03:05

npm-user-validate CVE-2020-7754 高危 1.0.0 1.0.1 nodejs-npm-user-validate: improper input validation when validating user emails leads to ReDoS

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7754

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-10-27 15:15 修改: 2020-10-27 17:31

qs CVE-2022-24999 高危 6.5.2 6.10.3, 6.9.7, 6.8.3, 6.7.3, 6.6.1, 6.5.3, 6.4.1, 6.3.3, 6.2.4 express: "qs" prototype poisoning causes the hang of the node process

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24999

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-11-26 22:15 修改: 2023-09-08 17:15

semver CVE-2022-25883 高危 5.3.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-21 05:15 修改: 2024-12-06 17:15

semver CVE-2022-25883 高危 5.6.0 7.5.2, 6.3.1, 5.7.2 nodejs-semver: Regular expression denial of service

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-25883

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-06-21 05:15 修改: 2024-12-06 17:15

ssri CVE-2021-27290 高危 6.0.1 6.0.2, 7.1.1, 8.0.1 nodejs-ssri: Regular expression DoS (ReDoS) when parsing malicious SRI in strict mode

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-27290

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-03-12 22:15 修改: 2022-05-13 20:51

tar CVE-2018-20834 高危 2.2.1 4.4.2, 2.2.2 nodejs-tar: Arbitrary file overwrites when extracting tarballs containing a hard-link

漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20834

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2019-04-30 19:29 修改: 2019-09-04 20:15

tar CVE-2021-32804 高危 2.2.1 3.2.2, 4.4.14, 5.0.6, 6.1.1 nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32804

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-08-03 19:15 修改: 2022-04-25 19:12

tar CVE-2021-37713 高危 2.2.1 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37713

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-08-31 17:15 修改: 2022-04-25 18:40

tar CVE-2021-32803 高危 4.4.8 3.2.3, 4.4.15, 5.0.7, 6.1.2 nodejs-tar: Insufficient symlink protection allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32803

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-08-03 19:15 修改: 2022-07-02 18:28

tar CVE-2021-32804 高危 4.4.8 3.2.2, 4.4.14, 5.0.6, 6.1.1 nodejs-tar: Insufficient absolute path sanitization allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-32804

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-08-03 19:15 修改: 2022-04-25 19:12

tar CVE-2021-37701 高危 4.4.8 4.4.16, 5.0.8, 6.1.7 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37701

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-08-31 17:15 修改: 2023-01-19 20:11

tar CVE-2021-37712 高危 4.4.8 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Insufficient symlink protection due to directory cache poisoning using symbolic links allowing arbitrary file creation and overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37712

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-08-31 17:15 修改: 2023-02-23 02:28

tar CVE-2021-37713 高危 4.4.8 4.4.18, 5.0.10, 6.1.9 nodejs-tar: Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-37713

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-08-31 17:15 修改: 2022-04-25 18:40

y18n CVE-2020-7774 高危 3.2.1 3.2.2, 4.0.1, 5.0.5 nodejs-y18n: prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7774

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-11-17 13:15 修改: 2022-12-02 19:40

y18n CVE-2020-7774 高危 4.0.0 3.2.2, 4.0.1, 5.0.5 nodejs-y18n: prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7774

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-11-17 13:15 修改: 2022-12-02 19:40

got CVE-2022-33987 中危 6.7.1 12.1.0, 11.8.5 nodejs-got: missing verification of requested URLs allows redirects to UNIX sockets

漏洞详情: https://avd.aquasec.com/nvd/cve-2022-33987

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2022-06-18 21:15 修改: 2022-06-28 16:15

minimist CVE-2020-7598 中危 1.2.0 0.2.1, 1.2.3 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7598

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-03-11 23:15 修改: 2022-04-22 19:02

hosted-git-info CVE-2021-23362 中危 2.7.1 2.8.9, 3.0.8 nodejs-hosted-git-info: Regular Expression denial of service via shortcutMatch in fromUrl()

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23362

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-03-23 17:15 修改: 2023-08-08 14:22

ajv CVE-2020-15366 中危 5.5.2 6.12.3 nodejs-ajv: prototype pollution via crafted JSON schema in ajv.validate function

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15366

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-07-15 20:15 修改: 2024-06-21 19:15

mem GHSA-4xcv-9jjx-gfj3 中危 1.1.0 4.0.0 Denial of Service in mem

漏洞详情: https://github.com/advisories/GHSA-4xcv-9jjx-gfj3

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tar CVE-2024-28863 中危 2.2.1 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-21 23:15 修改: 2024-06-10 17:16

npm CVE-2020-15095 中危 6.9.0 6.14.6 npm: sensitive information exposure through logs

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15095

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-07-07 19:15 修改: 2023-11-07 03:17

npm-registry-fetch GHSA-jmqm-f2gx-4fjv 中危 3.9.0 4.0.5, 8.1.1 Sensitive information exposure through logs in npm-registry-fetch

漏洞详情: https://github.com/advisories/GHSA-jmqm-f2gx-4fjv

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

https-proxy-agent GHSA-pc5p-h8pf-mvwp 中危 2.2.1 2.2.3 Machine-In-The-Middle in https-proxy-agent

漏洞详情: https://github.com/advisories/GHSA-pc5p-h8pf-mvwp

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

path-parse CVE-2021-23343 中危 1.0.6 1.0.7 nodejs-path-parse: ReDoS via splitDeviceRe, splitTailRe and splitPathRe

漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23343

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2021-05-04 09:15 修改: 2023-11-07 03:30

https-proxy-agent NSWG-ECO-505 中危 2.2.1 >=2.2.3 Man-in-the-Middle

漏洞详情: https://hackerone.com/reports/541502

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

tar CVE-2024-28863 中危 4.4.8 6.2.1 node-tar: denial of service while parsing a tar file due to lack of folders depth validation

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28863

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-03-21 23:15 修改: 2024-06-10 17:16

tough-cookie CVE-2023-26136 中危 2.4.3 4.1.3 tough-cookie: prototype pollution in cookie memstore

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26136

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-07-01 05:15 修改: 2024-06-21 19:15

request CVE-2023-28155 中危 2.88.0 The Request package through 2.88.1 for Node.js allows a bypass of SSRF ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28155

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2023-03-16 15:15 修改: 2024-08-02 13:15

minimist CVE-2020-7598 中危 0.0.8 0.2.1, 1.2.3 nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7598

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-03-11 23:15 修改: 2022-04-22 19:02

yargs-parser CVE-2020-7608 中危 9.0.2 13.1.2, 15.0.1, 18.1.1, 5.0.1 nodejs-yargs-parser: prototype pollution vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2020-7608

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2020-03-16 20:15 修改: 2022-11-15 16:40

bin-links GHSA-2mj8-pj3j-h362 低危 1.1.2 1.1.5 Symlink reference outside of node_modules in bin-links

漏洞详情: https://github.com/advisories/GHSA-2mj8-pj3j-h362

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

bin-links GHSA-gqf6-75v8-vr26 低危 1.1.2 1.1.5 Arbitrary File Write in bin-links

漏洞详情: https://github.com/advisories/GHSA-gqf6-75v8-vr26

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

ip CVE-2023-42282 低危 1.1.5 2.0.1, 1.1.9 nodejs-ip: arbitrary code execution via the isPublic() function

漏洞详情: https://avd.aquasec.com/nvd/cve-2023-42282

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-02-08 17:15 修改: 2024-10-09 15:14

bin-links GHSA-v45m-2wcp-gg98 低危 1.1.2 1.1.6 Global node_modules Binary Overwrite in bin-links

漏洞详情: https://github.com/advisories/GHSA-v45m-2wcp-gg98

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

npm-user-validate GHSA-xgh6-85xh-479p 低危 1.0.0 1.0.1 Regular Expression Denial of Service in npm-user-validate

漏洞详情: https://github.com/advisories/GHSA-xgh6-85xh-479p

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00

Python (python-pkg)
低危漏洞:0 中危漏洞:0 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
tornado CVE-2024-52804 高危 6.4.1 6.4.2 python-tornado: Tornado has HTTP cookie parsing DoS vulnerability

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52804

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-11-22 16:15 修改: 2024-11-22 16:15

opt/conda/envs/EDTA2/bin/rchive.Linux (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-34156 高危 1.22.5 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35

stdlib CVE-2024-34155 中危 1.22.5 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35

stdlib CVE-2024-34158 中危 1.22.5 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

opt/conda/envs/EDTA2/bin/transmute.Linux (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-34156 高危 1.22.5 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35

stdlib CVE-2024-34155 中危 1.22.5 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35

stdlib CVE-2024-34158 中危 1.22.5 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

opt/conda/envs/EDTA2/bin/xtract.Linux (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-34156 高危 1.22.5 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35

stdlib CVE-2024-34155 中危 1.22.5 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35

stdlib CVE-2024-34158 中危 1.22.5 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

opt/conda/envs/EDTA2/libexec/mafft/dash_client (gobinary)
低危漏洞:0 中危漏洞:2 高危漏洞:1 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
stdlib CVE-2024-34156 高危 1.22.5 1.22.7, 1.23.1 encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35

stdlib CVE-2024-34155 中危 1.22.5 1.22.7, 1.23.1 go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-11-04 17:35

stdlib CVE-2024-34158 中危 1.22.5 1.22.7, 1.23.1 go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158

镜像层: sha256:5031a5ddbe746a3fac4e7ef51ba3dd45fc14842b6dc92714135a8c34f1becbb9

发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35