ghcr.io/blakeblackshear/frigate:stable-tensorrt linux/amd64

ghcr.io/blakeblackshear/frigate:stable-tensorrt - Trivy安全扫描结果扫描时间: 2024-10-29 23:04

全部漏洞信息

低危漏洞:195

中危漏洞:156

高危漏洞:131

严重漏洞:20

系统OS: debian 11.10 扫描引擎: Trivy 扫描时间: 2024-10-29 23:04

ghcr.io/blakeblackshear/frigate:stable-tensorrt (debian 11.10) (debian)

低危漏洞:194

中危漏洞:111

高危漏洞:81

严重漏洞:14

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
curl	CVE-2023-23914	严重	7.74.0-1.3+deb11u12		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
libblas3	CVE-2021-4048	严重	3.9.0-3+deb11u1		lapack: Out-of-bounds read in *larrv 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4048 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-08 22:15 修改: 2023-11-07 03:40
libcurl4	CVE-2023-23914	严重	7.74.0-1.3+deb11u12		curl: HSTS ignored on multiple requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23914 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
libdb5.3	CVE-2019-8457	严重	5.3.28+dfsg1-0.8		sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2019-05-30 16:29 修改: 2023-11-07 03:13
libexpat1	CVE-2024-45491	严重	2.2.10-2+deb11u5	2.2.10-2+deb11u6	libexpat: Integer Overflow or Wraparound 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45491 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
libexpat1	CVE-2024-45492	严重	2.2.10-2+deb11u5	2.2.10-2+deb11u6	libexpat: integer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45492 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-30 03:15 修改: 2024-09-04 14:28
liblapack3	CVE-2021-4048	严重	3.9.0-3+deb11u1		lapack: Out-of-bounds read in *larrv 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4048 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-08 22:15 修改: 2023-11-07 03:40
libpython3.9-minimal	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
libpython3.9-stdlib	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
python3-pil	CVE-2022-24303	严重	8.1.2+dfsg-0.3+deb11u2		python-pillow: temporary directory with a space character allows removal of unrelated file after im.show() and related actions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24303 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-28 02:15 修改: 2023-11-07 03:44
python3.9	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
python3.9-minimal	CVE-2021-29921	严重	3.9.2-1		python-ipaddress: Improper input validation of octal strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-29921 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-06 13:15 修改: 2023-05-03 11:15
wget	CVE-2024-38428	严重	1.21-1+deb11u1		wget: Misinterpretation of input may lead to improper behavior 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-38428 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-16 03:15 修改: 2024-08-08 15:05
zlib1g	CVE-2023-45853	严重	1:1.2.11.dfsg-2+deb11u2		zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-10-14 02:15 修改: 2024-08-01 13:44
libexpat1	CVE-2024-45490	高危	2.2.10-2+deb11u5	2.2.10-2+deb11u6	libexpat: Negative Length Parsing Vulnerability in libexpat 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45490 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-30 03:15 修改: 2024-10-18 12:24
libext2fs2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
libgcrypt20	CVE-2021-33560	高危	1.8.7-6		libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-06-08 11:15 修改: 2023-11-07 03:35
libcom-err2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
libldap-2.4-2	CVE-2023-2953	高危	2.4.57+dfsg-3+deb11u1		openldap: null pointer dereference in ber_memalloc_x function 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2953 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-05-30 22:15 修改: 2023-08-02 16:46
libmfx1	CVE-2022-27170	高危	22.5.4-1		Protection mechanism failure in the Intel(R) Media SDK software before ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27170 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-16 21:15 修改: 2023-02-24 20:46
libmfx1	CVE-2022-34346	高危	22.5.4-1		Out-of-bounds read in the Intel(R) Media SDK software before version 2 ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34346 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-16 21:15 修改: 2023-02-27 19:08
libmfx1	CVE-2022-34841	高危	22.5.4-1		Improper buffer restrictions in the Intel(R) Media SDK software before ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34841 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-16 21:15 修改: 2023-02-24 20:57
libperl5.32	CVE-2020-16156	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
libperl5.32	CVE-2023-31484	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
curl	CVE-2022-42916	高危	7.74.0-1.3+deb11u12		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-10-29 02:15 修改: 2024-03-27 14:59
libpython3.9-minimal	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
libpython3.9-minimal	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
libpython3.9-minimal	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
libpython3.9-minimal	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
libpython3.9-minimal	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
libpython3.9-minimal	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
libpython3.9-minimal	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
libpython3.9-minimal	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-minimal	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
libpython3.9-minimal	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
libcurl4	CVE-2022-42916	高危	7.74.0-1.3+deb11u12		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42916 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-10-29 02:15 修改: 2024-03-27 14:59
libpython3.9-stdlib	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
libpython3.9-stdlib	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
libpython3.9-stdlib	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
libpython3.9-stdlib	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
libpython3.9-stdlib	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
libpython3.9-stdlib	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
libpython3.9-stdlib	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
libpython3.9-stdlib	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-stdlib	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
libpython3.9-stdlib	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
libsqlite3-0	CVE-2021-36690	高危	3.34.1-3	3.34.1-3+deb11u1	A segmentation fault can occur in the sqlite3.exe command-line compone ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36690 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-08-24 14:15 修改: 2024-08-04 01:15
libsqlite3-0	CVE-2023-7104	高危	3.34.1-3	3.34.1-3+deb11u1	sqlite: heap-buffer-overflow at sessionfuzz 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7104 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-12-29 10:15 修改: 2024-05-17 02:34
libss2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
libsystemd0	CVE-2023-50387	高危	247.3-7+deb11u5	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libsystemd0	CVE-2023-50868	高危	247.3-7+deb11u5	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libtiff5	CVE-2023-52355	高危	4.2.0-1+deb11u5		libtiff: TIFFRasterScanlineSize64 produce too-big size and could cause OOM 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52355 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-01-25 20:15 修改: 2024-05-17 17:37
libtiff5	CVE-2023-52356	高危	4.2.0-1+deb11u5		libtiff: Segment fault in libtiff in TIFFReadRGBATileExt() leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52356 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-01-25 20:15 修改: 2024-09-16 20:15
libtiff5	CVE-2024-7006	高危	4.2.0-1+deb11u5		libtiff: NULL pointer dereference in tif_dirinfo.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7006 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-12 13:38 修改: 2024-10-11 14:39
libudev1	CVE-2023-50387	高危	247.3-7+deb11u5	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libudev1	CVE-2023-50868	高危	247.3-7+deb11u5	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-14 16:15 修改: 2024-06-10 17:16
libxml2	CVE-2022-2309	高危	2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u5	lxml: NULL Pointer Dereference in lxml 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2309 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-07-05 10:15 修改: 2023-11-07 03:46
libxml2	CVE-2024-25062	高危	2.9.10+dfsg-6.7+deb11u4		libxml2: use-after-free in XMLReader 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25062 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-02-04 16:15 修改: 2024-02-13 00:40
libzstd1	CVE-2022-4899	高危	1.5.4+dfsg2-5		zstd: mysql: buffer overrun in util.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-03-31 20:15 修改: 2023-11-07 03:59
logsave	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
perl	CVE-2020-16156	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl	CVE-2023-31484	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
perl-base	CVE-2020-16156	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl-base	CVE-2023-31484	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
perl-modules-5.32	CVE-2020-16156	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-13 18:15 修改: 2023-11-07 03:18
perl-modules-5.32	CVE-2023-31484	高危	5.32.1-4+deb11u3	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-29 00:15 修改: 2024-08-01 13:43
libcurl4	CVE-2022-43551	高危	7.74.0-1.3+deb11u12		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-12-23 15:15 修改: 2024-03-27 14:58
python3-pil	CVE-2021-23437	高危	8.1.2+dfsg-0.3+deb11u2		python-pillow: possible ReDoS via the getrgb function 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-23437 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-09-03 16:15 修改: 2024-03-22 11:15
python3-pil	CVE-2022-45198	高危	8.1.2+dfsg-0.3+deb11u2		Pillow before 9.2.0 performs Improper Handling of Highly Compressed GI ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45198 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-14 07:15 修改: 2023-01-10 20:11
python3-pkg-resources	CVE-2024-6345	高危	52.0.0-4	52.0.0-4+deb11u1	pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
python3-setuptools	CVE-2024-6345	高危	52.0.0-4	52.0.0-4+deb11u1	pypa/setuptools: Remote code execution via download functions in the package_index module in pypa/setuptools 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6345 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-07-15 01:15 修改: 2024-07-15 13:00
curl	CVE-2022-43551	高危	7.74.0-1.3+deb11u12		curl: HSTS bypass via IDN 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-43551 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-12-23 15:15 修改: 2024-03-27 14:58
python3.9	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
python3.9	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
python3.9	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
python3.9	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
python3.9	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
python3.9	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
python3.9	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
python3.9	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
python3.9	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
e2fsprogs	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-04-14 21:15 修改: 2023-11-07 03:41
python3.9-minimal	CVE-2015-20107	高危	3.9.2-1		python: mailcap: findmatch() function does not sanitize the second argument 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-20107 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-04-13 16:15 修改: 2023-11-07 02:25
python3.9-minimal	CVE-2020-10735	高危	3.9.2-1		python: int() type in PyLong_FromString() does not limit amount of digits converting text to int leading to DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-10735 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-09-09 14:15 修改: 2023-06-30 23:15
python3.9-minimal	CVE-2021-3737	高危	3.9.2-1		python: urllib: HTTP client possible infinite loop on a 100 Continue response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3737 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-04 19:15 修改: 2023-11-07 03:38
python3.9-minimal	CVE-2022-0391	高危	3.9.2-1		python: urllib.parse does not sanitize URLs containing ASCII newline and tabs 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0391 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-02-09 23:15 修改: 2023-11-07 03:41
python3.9-minimal	CVE-2022-42919	高危	3.9.2-1		python: local privilege escalation via the multiprocessing forkserver start method 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42919 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-07 00:15 修改: 2023-11-07 03:53
python3.9-minimal	CVE-2022-45061	高危	3.9.2-1		python: CPU denial of service via inefficient IDNA decoder 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-45061 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-11-09 07:15 修改: 2023-11-07 03:54
python3.9-minimal	CVE-2023-24329	高危	3.9.2-1		python: urllib.parse url blocklisting bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24329 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-17 15:15 修改: 2023-11-07 04:08
python3.9-minimal	CVE-2023-6597	高危	3.9.2-1		python: Path traversal on tempfile.TemporaryDirectory 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6597 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9-minimal	CVE-2024-6232	高危	3.9.2-1		python: cpython: tarfile: ReDos via excessive backtracking while parsing header values 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6232 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-03 13:15 修改: 2024-09-04 21:15
python3.9-minimal	CVE-2024-7592	高危	3.9.2-1		cpython: python: Uncontrolled CPU resource consumption when in http.cookies module 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7592 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-19 19:15 修改: 2024-09-04 21:15
bash	CVE-2022-3715	高危	5.1-2+deb11u1		bash: a heap-buffer-overflow in valid_parameter_transform 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3715 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-01-05 15:15 修改: 2023-02-24 18:38
libexpat1	CVE-2023-52425	高危	2.2.10-2+deb11u5	2.2.10-2+deb11u6	expat: parsing large tokens can trigger a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52425 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-02-04 20:15 修改: 2024-08-26 20:35
libpython3.9-stdlib	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
libpython3.9-stdlib	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-stdlib	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
libpython3.9-stdlib	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
libpython3.9-stdlib	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-10-22 17:15 修改: 2024-10-23 15:12
libncursesw6	CVE-2023-50495	中危	6.2+20201114-2+deb11u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libnghttp2-14	CVE-2024-28182	中危	1.43.0-1+deb11u1	1.43.0-1+deb11u2	nghttp2: CONTINUATION frames DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28182 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-04-04 15:15 修改: 2024-05-01 18:15
libpam-modules	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libssl1.1	CVE-2023-5678	中危	1.1.1w-0+deb11u1		openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-0727	中危	1.1.1w-0+deb11u1		openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-4741	中危	1.1.1w-0+deb11u1		openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl1.1	CVE-2024-5535	中危	1.1.1w-0+deb11u1		openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libssl3	CVE-2023-5678	中危	3.0.13-1~deb12u1		openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
libssl3	CVE-2024-0727	中危	3.0.13-1~deb12u1		openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
libssl3	CVE-2024-4741	中危	3.0.13-1~deb12u1		openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl3	CVE-2024-5535	中危	3.0.13-1~deb12u1		openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
libpam-modules	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-modules-bin	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libsystemd0	CVE-2023-7008	中危	247.3-7+deb11u5	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libpam-modules-bin	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libpam-runtime	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libpam-runtime	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libtiff5	CVE-2022-40090	中危	4.2.0-1+deb11u5		libtiff: infinite loop via a crafted TIFF file 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40090 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-22 19:16 修改: 2023-08-26 02:13
libtiff5	CVE-2023-25433	中危	4.2.0-1+deb11u5		libtiff: Buffer Overflow via /libtiff/tools/tiffcrop.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-25433 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-06-29 20:15 修改: 2023-08-01 02:15
libtiff5	CVE-2023-26965	中危	4.2.0-1+deb11u5		libtiff: heap-based use after free via a crafted TIFF image in loadImage() in tiffcrop.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26965 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-06-14 21:15 修改: 2023-08-01 02:15
libtiff5	CVE-2023-26966	中危	4.2.0-1+deb11u5		libtiff: Buffer Overflow in uv_encode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-26966 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-06-29 20:15 修改: 2023-08-01 02:15
libtiff5	CVE-2023-2908	中危	4.2.0-1+deb11u5		libtiff: null pointer dereference in tif_dir.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2908 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-06-30 22:15 修改: 2023-11-07 04:13
libtiff5	CVE-2023-3316	中危	4.2.0-1+deb11u5		libtiff: tiffcrop: null pointer dereference in TIFFClose() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3316 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-06-19 12:15 修改: 2023-08-01 02:15
libtiff5	CVE-2023-3618	中危	4.2.0-1+deb11u5		libtiff: segmentation fault in Fax3Encode in libtiff/tif_fax3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3618 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-07-12 15:15 修改: 2024-03-23 11:15
libtiff5	CVE-2023-6277	中危	4.2.0-1+deb11u5		libtiff: Out-of-memory in TIFFOpen via a craft file 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6277 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-11-24 19:15 修改: 2024-09-17 01:15
libtinfo6	CVE-2023-50495	中危	6.2+20201114-2+deb11u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libpam0g	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-10-23 14:15 修改: 2024-10-23 15:12
libpam0g	CVE-2024-22365	中危	1.4.0-9+deb11u1		pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-06 08:15 修改: 2024-02-14 00:27
libudev1	CVE-2023-7008	中危	247.3-7+deb11u5	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-12-23 13:15 修改: 2024-09-16 17:16
libwayland-client0	CVE-2021-3782	中危	1.21.0-1		wayland: libwayland-server wl_shm reference-count overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3782 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-09-23 16:15 修改: 2023-11-07 03:38
libcurl4	CVE-2024-7264	中危	7.74.0-1.3+deb11u12	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-07-31 08:15 修改: 2024-08-12 17:30
libcurl4	CVE-2024-8096	中危	7.74.0-1.3+deb11u12		curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
libxml2	CVE-2016-3709	中危	2.9.10+dfsg-6.7+deb11u4	2.9.10+dfsg-6.7+deb11u5	libxml2: Incorrect server side include parsing can lead to XSS 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-3709 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-07-28 17:15 修改: 2022-12-07 16:39
libxml2	CVE-2023-39615	中危	2.9.10+dfsg-6.7+deb11u4		libxml2: crafted xml can cause global buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39615 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-29 17:15 修改: 2024-08-02 19:15
libxml2	CVE-2023-45322	中危	2.9.10+dfsg-6.7+deb11u4		libxml2: use-after-free in xmlUnlinkNode() in tree.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45322 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-10-06 22:15 修改: 2024-08-02 21:15
libc-bin	CVE-2023-4806	中危	2.36-9+deb12u7		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
locales	CVE-2023-4806	中危	2.36-9+deb12u7		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
locales	CVE-2023-4813	中危	2.36-9+deb12u7		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
login	CVE-2023-4641	中危	1:4.8.1-1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
libc-bin	CVE-2023-4813	中危	2.36-9+deb12u7		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
ncurses-base	CVE-2023-50495	中危	6.2+20201114-2+deb11u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
ncurses-bin	CVE-2023-50495	中危	6.2+20201114-2+deb11u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
openssl	CVE-2023-5678	中危	1.1.1w-0+deb11u1		openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-11-06 16:15 修改: 2024-10-14 15:15
openssl	CVE-2024-0727	中危	1.1.1w-0+deb11u1		openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-01-26 09:15 修改: 2024-10-14 15:15
openssl	CVE-2024-4741	中危	1.1.1w-0+deb11u1		openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
openssl	CVE-2024-5535	中危	1.1.1w-0+deb11u1		openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-27 11:15 修改: 2024-07-12 14:15
passwd	CVE-2023-4641	中危	1:4.8.1-1		shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-12-27 16:15 修改: 2024-05-03 16:15
libc-l10n	CVE-2023-4806	中危	2.36-9+deb12u7		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc-l10n	CVE-2023-4813	中危	2.36-9+deb12u7		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
libc6	CVE-2023-4806	中危	2.36-9+deb12u7		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-18 17:15 修改: 2024-09-16 14:15
libc6	CVE-2023-4813	中危	2.36-9+deb12u7		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-12 22:15 修改: 2024-09-16 14:15
curl	CVE-2024-7264	中危	7.74.0-1.3+deb11u12	7.74.0-1.3+deb11u13	curl: libcurl: ASN.1 date parser overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-7264 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-07-31 08:15 修改: 2024-08-12 17:30
libgcrypt20	CVE-2024-2236	中危	1.8.7-6		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-03-06 22:15 修改: 2024-09-14 04:15
python3-numpy	CVE-2021-33430	中危	1:1.19.5-1		numpy: buffer overflow in the PyArray_NewFromDescr_int() in ctors.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33430 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-17 19:15 修改: 2024-08-04 00:15
libgnutls30	CVE-2024-28834	中危	3.7.1-5+deb11u5	3.7.1-5+deb11u6	gnutls: vulnerable to Minerva side-channel information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-03-21 14:15 修改: 2024-09-12 20:15
libgnutls30	CVE-2024-28835	中危	3.7.1-5+deb11u5	3.7.1-5+deb11u6	gnutls: potential crash during chain building/verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-03-21 06:15 修改: 2024-09-16 19:16
libjpeg62-turbo	CVE-2021-46822	中危	1:2.0.6-4		libjpeg-turbo: heap buffer overflow in get_word_rgb_row() in rdppm.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46822 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-06-18 16:15 修改: 2022-08-15 15:52
libpython3.9-minimal	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
python3-pkg-resources	CVE-2022-40897	中危	52.0.0-4	52.0.0-4+deb11u1	pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-12-23 00:15 修改: 2024-06-21 19:15
libpython3.9-minimal	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
python3-setuptools	CVE-2022-40897	中危	52.0.0-4	52.0.0-4+deb11u1	pypa-setuptools: Regular Expression Denial of Service (ReDoS) in package_index.py 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40897 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-12-23 00:15 修改: 2024-06-21 19:15
libpython3.9-minimal	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
libpython3.9-minimal	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
libpython3.9-minimal	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
libpython3.9-minimal	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
libpython3.9-minimal	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
libpython3.9-minimal	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
libpython3.9-minimal	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
libpython3.9-minimal	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-10-22 17:15 修改: 2024-10-23 15:12
curl	CVE-2024-8096	中危	7.74.0-1.3+deb11u12		curl: OCSP stapling bypass with GnuTLS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8096 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-11 10:15 修改: 2024-09-11 16:26
curl	CVE-2023-23915	中危	7.74.0-1.3+deb11u12		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
curl	CVE-2023-46219	中危	7.74.0-1.3+deb11u12		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-12-12 02:15 修改: 2024-01-19 16:15
python3.9	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
python3.9	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
python3.9	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
python3.9	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
python3.9	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
python3.9	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
python3.9	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
python3.9	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
python3.9	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-10-22 17:15 修改: 2024-10-23 15:12
libcurl4	CVE-2023-23915	中危	7.74.0-1.3+deb11u12		curl: HSTS amnesia with --parallel 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-23915 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-23 20:15 修改: 2024-03-27 14:55
libcurl4	CVE-2023-46219	中危	7.74.0-1.3+deb11u12		curl: excessively long file name may lead to unknown HSTS status 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-46219 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-12-12 02:15 修改: 2024-01-19 16:15
libmfx1	CVE-2022-35883	中危	22.5.4-1		NULL pointer dereference in the Intel(R) Media SDK software before ver ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35883 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-16 21:15 修改: 2023-02-27 19:09
libmfx1	CVE-2022-36289	中危	22.5.4-1		Protection mechanism failure in the Intel(R) Media SDK software before ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-36289 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-02-16 21:15 修改: 2023-02-27 18:52
libmfx1	CVE-2023-45221	中危	22.5.4-1		Improper buffer restrictions in Intel(R) Media SDK all versions may al ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45221 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-05-16 21:15 修改: 2024-05-17 18:36
libmfx1	CVE-2023-47169	中危	22.5.4-1		Improper buffer restrictions in Intel(R) Media SDK software all versio ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47169 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-05-16 21:16 修改: 2024-07-03 01:42
libmfx1	CVE-2023-48368	中危	22.5.4-1		Improper input validation in Intel(R) Media SDK software all versions ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48368 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-05-16 21:16 修改: 2024-07-03 01:42
libncurses6	CVE-2023-50495	中危	6.2+20201114-2+deb11u2		ncurses: segmentation fault via _nc_wrap_entry() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50495 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-12-12 15:15 修改: 2024-01-31 03:15
libpython3.9-stdlib	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
libpython3.9-stdlib	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
libpython3.9-stdlib	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
python3.9-minimal	CVE-2021-3426	中危	3.9.2-1		python: Information disclosure via pydoc 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3426 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-05-20 13:15 修改: 2023-11-07 03:38
python3.9-minimal	CVE-2021-3733	中危	3.9.2-1		python: urllib: Regular expression DoS in AbstractBasicAuthHandler 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3733 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-10 17:42 修改: 2023-06-30 23:15
python3.9-minimal	CVE-2021-4189	中危	3.9.2-1		python: ftplib should not use the host from the PASV response 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4189 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-24 16:15 修改: 2023-06-30 23:15
python3.9-minimal	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
python3.9-minimal	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
python3.9-minimal	CVE-2024-0397	中危	3.9.2-1		cpython: python: Memory race condition in ssl.SSLContext certificate store methods 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0397 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 16:15 修改: 2024-07-03 01:44
python3.9-minimal	CVE-2024-0450	中危	3.9.2-1		python: The zipfile module is vulnerable to zip-bombs leading to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0450 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-19 16:15 修改: 2024-06-10 18:15
python3.9-minimal	CVE-2024-6923	中危	3.9.2-1		cpython: python: email module doesn't properly quotes newlines in email headers, allowing header injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-6923 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-01 14:15 修改: 2024-09-04 21:15
python3.9-minimal	CVE-2024-8088	中危	3.9.2-1		python: cpython: Iterating over a malicious ZIP file may lead to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8088 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-22 19:15 修改: 2024-09-04 23:15
python3.9-minimal	CVE-2024-9287	中危	3.9.2-1		python: Virtual environment (venv) activation scripts don't quote paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9287 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-10-22 17:15 修改: 2024-10-23 15:12
libpython3.9-stdlib	CVE-2023-27043	中危	3.9.2-1		python: Parsing errors in email/_parseaddr.py lead to incorrect value in email address part of tuple 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-27043 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-19 00:15 修改: 2024-02-26 16:27
wget	CVE-2021-31879	中危	1.21-1+deb11u1		wget: authorization header disclosure on redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-04-29 05:15 修改: 2022-05-13 20:52
libpython3.9-stdlib	CVE-2023-40217	中危	3.9.2-1		python: TLS handshake bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-40217 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-25 01:15 修改: 2023-11-07 04:20
libsepol1	CVE-2021-36085	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36086	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in cil_reset_classpermission() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsepol1	CVE-2021-36087	低危	3.1-1	3.1-1+deb11u1	libsepol: heap-based buffer overflow in ebitmap_match_any() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libsmartcols1	CVE-2022-0563	低危	2.36.1-8+deb11u2		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libkrb5-3	CVE-2024-26461	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libkrb5support0	CVE-2018-5709	低危	1.18.3-6+deb11u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libsqlite3-0	CVE-2021-45346	低危	3.34.1-3		sqlite: crafted SQL query allows a malicious user to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-45346 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-02-14 19:15 修改: 2024-08-04 05:15
libsqlite3-0	CVE-2022-35737	低危	3.34.1-3		sqlite: an array-bounds overflow if billions of bytes are used in a string argument to a C API 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-35737 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-03 06:15 修改: 2024-03-27 16:05
libkrb5support0	CVE-2024-26458	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libkrb5support0	CVE-2024-26461	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libc-l10n	CVE-2010-4756	低危	2.36-9+deb12u7		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libc-l10n	CVE-2018-20796	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libldap-2.4-2	CVE-2015-3276	低危	2.4.57+dfsg-3+deb11u1		openldap: incorrect multi-keyword mode cipherstring parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2015-3276 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2015-12-07 20:59 修改: 2023-04-28 18:28
libssl1.1	CVE-2024-2511	低危	1.1.1w-0+deb11u1		openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl1.1	CVE-2024-9143	低危	1.1.1w-0+deb11u1		openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
libldap-2.4-2	CVE-2017-14159	低危	2.4.57+dfsg-3+deb11u1		openldap: Privilege escalation via PID file manipulation 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-14159 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2017-09-05 18:29 修改: 2022-06-13 19:18
libldap-2.4-2	CVE-2017-17740	低危	2.4.57+dfsg-3+deb11u1		openldap: contrib/slapd-modules/nops/nops.c attempts to free stack buffer allowing remote attackers to cause a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17740 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2017-12-18 06:29 修改: 2022-06-13 19:10
libldap-2.4-2	CVE-2020-15719	低危	2.4.57+dfsg-3+deb11u1		openldap: Certificate validation incorrectly matches name against CN-ID 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-15719 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-07-14 14:15 修改: 2022-05-12 15:01
libc-l10n	CVE-2019-1010022	低危	2.36-9+deb12u7		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libssl3	CVE-2024-2511	低危	3.0.13-1~deb12u1		openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
libssl3	CVE-2024-9143	低危	3.0.13-1~deb12u1		openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
libc-l10n	CVE-2019-1010023	低危	2.36-9+deb12u7		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc-l10n	CVE-2019-1010024	低危	2.36-9+deb12u7		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc-l10n	CVE-2019-1010025	低危	2.36-9+deb12u7		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libsystemd0	CVE-2013-4392	低危	247.3-7+deb11u5		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libsystemd0	CVE-2020-13529	低危	247.3-7+deb11u5		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libsystemd0	CVE-2023-31437	低危	247.3-7+deb11u5		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31438	低危	247.3-7+deb11u5		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libsystemd0	CVE-2023-31439	低危	247.3-7+deb11u5		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libc-l10n	CVE-2019-9192	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
curl	CVE-2021-22923	低危	7.74.0-1.3+deb11u12		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
curl	CVE-2023-28320	低危	7.74.0-1.3+deb11u12		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-05-26 21:15 修改: 2023-10-20 18:42
libc6	CVE-2010-4756	低危	2.36-9+deb12u7		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libmfx1	CVE-2023-22656	低危	22.5.4-1		Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL soft ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-22656 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-05-16 21:15 修改: 2024-07-03 01:39
libmfx1	CVE-2023-47282	低危	22.5.4-1		Out-of-bounds write in Intel(R) Media SDK all versions and some Intel( ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47282 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-05-16 21:16 修改: 2024-07-03 01:42
libmfx1	CVE-2023-48727	低危	22.5.4-1		NULL pointer dereference in some Intel(R) oneVPL software before versi ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48727 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-05-16 21:16 修改: 2024-07-03 01:42
libmount1	CVE-2022-0563	低危	2.36.1-8+deb11u2		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libc6	CVE-2018-20796	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libncurses6	CVE-2023-45918	低危	6.2+20201114-2+deb11u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libc6	CVE-2019-1010022	低危	2.36-9+deb12u7		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libtiff5	CVE-2017-16232	低危	4.2.0-1+deb11u5		libtiff: Memory leaks in tif_open.c, tif_lzw.c, and tif_aux.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16232 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-03-21 15:59 修改: 2024-08-05 21:15
libtiff5	CVE-2017-17973	低危	4.2.0-1+deb11u5		libtiff: heap-based use after free in tiff2pdf.c:t2p_writeproc 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-17973 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2017-12-29 21:29 修改: 2024-08-05 21:15
libtiff5	CVE-2017-5563	低危	4.2.0-1+deb11u5		libtiff: Heap-buffer overflow in LZWEncode tif_lzw.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-5563 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2017-01-23 07:59 修改: 2019-10-03 00:03
libtiff5	CVE-2017-9117	低危	4.2.0-1+deb11u5		libtiff: Heap-based buffer over-read in bmp2tiff 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9117 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2017-05-21 19:29 修改: 2019-10-03 00:03
libtiff5	CVE-2018-10126	低危	4.2.0-1+deb11u5		libtiff: NULL pointer dereference in the jpeg_fdct_16x16 function in jfdctint.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-10126 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2018-04-21 21:29 修改: 2024-08-20 05:15
libtiff5	CVE-2022-1056	低危	4.2.0-1+deb11u5		libtiff: heap-based buffer overflow in _TIFFmemcpy() in tif_unix.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1056 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-03-28 19:15 修改: 2023-02-22 17:35
libtiff5	CVE-2022-1210	低危	4.2.0-1+deb11u5		tiff: Malicious file leads to a denial of service in TIFF File Handler 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1210 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-04-03 09:15 修改: 2023-07-24 13:46
libtiff5	CVE-2023-1916	低危	4.2.0-1+deb11u5		libtiff: out-of-bounds read in extractImageSection() in tools/tiffcrop.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-1916 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-10 22:15 修改: 2023-12-23 07:15
libtiff5	CVE-2023-30775	低危	4.2.0-1+deb11u5		libtiff: Heap buffer overflow in extractContigSamples32bits, tiffcrop.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-30775 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-05-19 15:15 修改: 2023-07-03 16:15
libtiff5	CVE-2023-3164	低危	4.2.0-1+deb11u5		libtiff: heap-buffer-overflow in extractImageSection() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3164 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-11-02 12:15 修改: 2024-03-08 19:38
libtiff5	CVE-2023-6228	低危	4.2.0-1+deb11u5		libtiff: heap-based buffer overflow in cpStripToTile() in tools/tiffcp.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-6228 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-12-18 14:15 修改: 2024-10-11 16:15
libncursesw6	CVE-2023-45918	低危	6.2+20201114-2+deb11u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libtinfo6	CVE-2023-45918	低危	6.2+20201114-2+deb11u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libc6	CVE-2019-1010023	低危	2.36-9+deb12u7		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc6	CVE-2019-1010024	低危	2.36-9+deb12u7		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libc6	CVE-2019-1010025	低危	2.36-9+deb12u7		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libudev1	CVE-2013-4392	低危	247.3-7+deb11u5		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2013-10-28 22:55 修改: 2022-01-31 17:49
libudev1	CVE-2020-13529	低危	247.3-7+deb11u5		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-05-10 16:15 修改: 2023-11-07 03:16
libudev1	CVE-2023-31437	低危	247.3-7+deb11u5		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31438	低危	247.3-7+deb11u5		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libudev1	CVE-2023-31439	低危	247.3-7+deb11u5		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-06-13 17:15 修改: 2024-08-02 15:16
libuuid1	CVE-2022-0563	低危	2.36.1-8+deb11u2		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libc6	CVE-2019-9192	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
libcairo2	CVE-2017-7475	低危	1.16.0-7		cairo: NULL pointer dereference with a crafted font file 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2017-05-19 20:29 修改: 2023-02-12 23:30
libcairo2	CVE-2018-18064	低危	1.16.0-7		cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2018-10-08 18:29 修改: 2023-11-07 02:54
libcairo2	CVE-2019-6461	低危	1.16.0-7		cairo: assertion problem in _cairo_arc_in_direction in cairo-arc.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6461 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-01-16 18:29 修改: 2023-11-07 03:13
libcairo2	CVE-2019-6462	低危	1.16.0-7		cairo: infinite loop in the function _arc_error_normalized in the file cairo-arc.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6462 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-01-16 18:29 修改: 2023-11-07 03:13
curl	CVE-2024-2379	低危	7.74.0-1.3+deb11u12		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
libxml2	CVE-2024-34459	低危	2.9.10+dfsg-6.7+deb11u4		libxml2: buffer over-read in xmlHTMLPrintFileContext in xmllint.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34459 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-05-14 15:39 修改: 2024-08-22 18:35
libpcap0.8	CVE-2023-7256	低危	1.10.0-2		libpcap: Double Free in libcap 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7256 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-31 00:15 修改: 2024-09-19 17:53
libpcap0.8	CVE-2024-8006	低危	1.10.0-2		libpcap: NULL pointer derefence in pcap_findalldevs_ex() in pcap-new.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-8006 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-08-31 00:15 修改: 2024-09-19 17:46
libpcre2-8-0	CVE-2022-41409	低危	10.36-2+deb11u1		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-07-18 14:15 修改: 2023-07-27 03:46
locales	CVE-2010-4756	低危	2.36-9+deb12u7		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
locales	CVE-2018-20796	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
locales	CVE-2019-1010022	低危	2.36-9+deb12u7		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
locales	CVE-2019-1010023	低危	2.36-9+deb12u7		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
locales	CVE-2019-1010024	低危	2.36-9+deb12u7		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
locales	CVE-2019-1010025	低危	2.36-9+deb12u7		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
locales	CVE-2019-9192	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
libpcre3	CVE-2017-11164	低危	2:8.39-13		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2017-07-11 03:29 修改: 2023-11-07 02:38
login	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
login	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
login	CVE-2023-29383	低危	1:4.8.1-1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
login	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libpcre3	CVE-2017-16231	低危	2:8.39-13		pcre: self-recursive call in match() in pcre_exec.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16231 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2019-03-21 15:59 修改: 2024-08-05 21:15
mesa-va-drivers	CVE-2023-45913	低危	22.3.6-1+deb12u1		Mesa v23.0.4 was discovered to contain a NULL pointer dereference via ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45913 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-27 04:15 修改: 2024-08-02 21:15
mesa-va-drivers	CVE-2023-45919	低危	22.3.6-1+deb12u1		Mesa 23.0.4 was discovered to contain a buffer over-read in glXQuerySe ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45919 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15
mesa-va-drivers	CVE-2023-45922	低危	22.3.6-1+deb12u1		glx_pbuffer.c in Mesa 23.0.4 was discovered to contain a segmentation ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45922 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-27 05:15 修改: 2024-08-02 21:15
mesa-va-drivers	CVE-2023-45931	低危	22.3.6-1+deb12u1		Mesa 23.0.4 was discovered to contain a NULL pointer dereference in ch ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45931 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-27 04:15 修改: 2024-09-04 15:35
mount	CVE-2022-0563	低危	2.36.1-8+deb11u2		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libpcre3	CVE-2017-7245	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
ncurses-base	CVE-2023-45918	低危	6.2+20201114-2+deb11u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libpcre3	CVE-2017-7246	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2017-03-23 21:59 修改: 2018-08-17 10:29
ncurses-bin	CVE-2023-45918	低危	6.2+20201114-2+deb11u2		ncurses: NULL pointer dereference in tgetstr in tinfo/lib_termcap.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45918 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-16 22:15 修改: 2024-03-15 11:15
libpcre3	CVE-2019-20838	低危	2:8.39-13		pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2020-06-15 17:15 修改: 2024-03-27 16:05
bsdutils	CVE-2022-0563	低危	1:2.36.1-8+deb11u2		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
gcc-10-base	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libperl5.32	CVE-2011-4116	低危	5.32.1-4+deb11u3		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
openssl	CVE-2024-2511	低危	1.1.1w-0+deb11u1		openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-04-08 14:15 修改: 2024-10-14 15:15
openssl	CVE-2024-9143	低危	1.1.1w-0+deb11u1		openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-10-16 17:15 修改: 2024-10-18 12:53
libperl5.32	CVE-2023-31486	低危	5.32.1-4+deb11u3		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
passwd	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2007-10-28 17:08 修改: 2018-10-15 21:45
passwd	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2019-12-03 15:15 修改: 2023-02-13 00:28
passwd	CVE-2023-29383	低危	1:4.8.1-1		shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-04-14 22:15 修改: 2023-04-24 18:05
passwd	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libpixman-1-0	CVE-2023-37769	低危	0.42.2-1		stress-test master commit e4c878 was discovered to contain a FPE vulne ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-07-17 20:15 修改: 2023-07-28 13:22
libpng16-16	CVE-2019-6129	低危	1.6.37-3		libpng: memory leak of png_info struct in pngcp.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-6129 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-01-11 05:29 修改: 2024-08-04 21:15
perl	CVE-2011-4116	低危	5.32.1-4+deb11u3		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl	CVE-2023-31486	低危	5.32.1-4+deb11u3		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
libpng16-16	CVE-2021-4214	低危	1.6.37-3		libpng: hardcoded value leads to heap-overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4214 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-24 16:15 修改: 2022-11-08 02:32
libproc2-0	CVE-2023-4016	低危	2:4.0.2-3		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
perl-base	CVE-2011-4116	低危	5.32.1-4+deb11u3		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl-base	CVE-2023-31486	低危	5.32.1-4+deb11u3		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
libprocps8	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
gcc-9-base	CVE-2023-4039	低危	9.3.0-22		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
perl-modules-5.32	CVE-2011-4116	低危	5.32.1-4+deb11u3		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-01-31 18:15 修改: 2020-02-05 22:10
perl-modules-5.32	CVE-2023-31486	低危	5.32.1-4+deb11u3		http-tiny: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-04-29 00:15 修改: 2023-06-21 18:19
procps	CVE-2023-4016	低危	2:3.3.17-5		procps: ps buffer overflow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4016 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-02 05:15 修改: 2023-12-15 18:19
python-pip-whl	CVE-2018-20225	低危	20.3.4-4+deb11u1		python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible. 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20225 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-05-08 18:15 修改: 2024-08-05 12:15
python-pip-whl	CVE-2023-5752	低危	20.3.4-4+deb11u1		pip: Mercurial configuration injectable in repo revision when installing via pip 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-10-25 18:17 修改: 2024-06-10 18:15
gpgv	CVE-2022-3219	低危	2.2.27-2+deb11u2		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-02-23 20:15 修改: 2023-05-26 16:31
python3-numpy	CVE-2021-34141	低危	1:1.19.5-1		numpy: incomplete string comparison in the numpy.core component 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-34141 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-17 19:15 修改: 2023-02-24 15:35
python3-numpy	CVE-2021-41495	低危	1:1.19.5-1		numpy: NULL pointer dereference in numpy.sort in in the PyArray_DescrNew() due to missing return-value validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41495 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-17 20:15 修改: 2024-08-04 04:15
python3-numpy	CVE-2021-41496	低危	1:1.19.5-1		numpy: buffer overflow in the array_from_pyobj() in fortranobject.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41496 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-12-17 20:15 修改: 2024-08-04 04:15
libapt-pkg6.0	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
coreutils	CVE-2016-2781	低危	8.32-4+b1		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2017-02-07 15:59 修改: 2023-11-07 02:32
libblkid1	CVE-2022-0563	低危	2.36.1-8+deb11u2		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
python3-pip	CVE-2018-20225	低危	20.3.4-4+deb11u1		python-pip: when --extra-index-url option is used and package does not already exist in the public index, the installation of malicious package with arbitrary version number is possible. 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20225 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-05-08 18:15 修改: 2024-08-05 12:15
python3-pip	CVE-2023-5752	低危	20.3.4-4+deb11u1		pip: Mercurial configuration injectable in repo revision when installing via pip 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5752 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-10-25 18:17 修改: 2024-06-10 18:15
libcurl4	CVE-2021-22922	低危	7.74.0-1.3+deb11u12		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:12
libcurl4	CVE-2021-22923	低危	7.74.0-1.3+deb11u12		curl: Metalink download sends credentials 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22923 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:11
libcurl4	CVE-2023-28320	低危	7.74.0-1.3+deb11u12		curl: siglongjmp race condition may lead to crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-28320 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-05-26 21:15 修改: 2023-10-20 18:42
libcurl4	CVE-2024-2379	低危	7.74.0-1.3+deb11u12		curl: QUIC certificate check bypass with wolfSSL 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2379 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-27 08:15 修改: 2024-07-30 02:15
python3-wheel	CVE-2022-40898	低危	0.34.2-1		python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-40898 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-12-23 00:15 修改: 2022-12-30 22:15
coreutils	CVE-2017-18018	低危	8.32-4+b1		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2018-01-04 04:29 修改: 2018-01-19 15:46
libdw1	CVE-2021-33294	低危	0.188-2.1		elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-07-18 14:15 修改: 2023-07-27 15:19
libdw1	CVE-2024-25260	低危	0.188-2.1		elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-02-20 18:15 修改: 2024-08-01 13:47
libelf1	CVE-2021-33294	低危	0.188-2.1		elfutils: an infinite loop was found in the function handle_symtab in readelf.c which causes denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33294 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-07-18 14:15 修改: 2023-07-27 15:19
libelf1	CVE-2024-25260	低危	0.188-2.1		elfutils: global-buffer-overflow exists in the function ebl_machine_flag_name in eblmachineflagname.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-25260 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-02-20 18:15 修改: 2024-08-01 13:47
apt	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2019-11-26 00:15 修改: 2021-02-09 16:08
libc-bin	CVE-2010-4756	低危	2.36-9+deb12u7		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2011-03-02 20:00 修改: 2021-09-01 12:15
libc-bin	CVE-2018-20796	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 02:29 修改: 2023-11-07 02:56
libc-bin	CVE-2019-1010022	低危	2.36-9+deb12u7		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libexpat1	CVE-2013-0340	低危	2.2.10-2+deb11u5		expat: internal entity expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-0340 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2014-01-21 18:55 修改: 2023-11-07 02:13
libexpat1	CVE-2023-52426	低危	2.2.10-2+deb11u5		expat: recursive XML entity expansion vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-52426 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-02-04 20:15 修改: 2024-03-07 17:15
libexpat1	CVE-2024-28757	低危	2.2.10-2+deb11u5		expat: XML Entity Expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28757 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-10 05:15 修改: 2024-05-01 19:15
libpython3.9-minimal	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
libpython3.9-minimal	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
libpython3.9-minimal	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
libpython3.9-minimal	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
libpython3.9-minimal	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
libc-bin	CVE-2019-1010023	低危	2.36-9+deb12u7		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libfreetype6	CVE-2022-31782	低危	2.10.4+dfsg-1+deb11u1		ftbench.c in FreeType Demo Programs through 2.12.1 has a heap-based bu ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-31782 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-06-02 14:15 修改: 2022-06-10 18:08
libgcc-s1	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libc-bin	CVE-2019-1010024	低危	2.36-9+deb12u7		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
python3.9	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
python3.9	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
python3.9	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
python3.9	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
python3.9	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
libc-bin	CVE-2019-1010025	低危	2.36-9+deb12u7		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-07-15 04:15 修改: 2024-08-05 03:15
libgcrypt20	CVE-2018-6829	低危	1.8.7-6		libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2018-02-07 23:29 修改: 2020-01-15 20:15
libgfortran5	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libglib2.0-0	CVE-2012-0039	低危	2.74.6-2+deb12u3		glib2: hash table collisions CPU usage DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-0039 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2012-01-14 17:55 修改: 2024-08-06 18:15
libc-bin	CVE-2019-9192	低危	2.36-9+deb12u7		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2019-02-26 18:29 修改: 2024-08-04 22:15
bash	TEMP-0841856-B18BAF	低危	5.1-2+deb11u1		[Privilege escalation possible to other user than root] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0841856-B18BAF 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgnutls30	CVE-2011-3389	低危	3.7.1-5+deb11u5		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2011-09-06 19:55 修改: 2022-11-29 15:56
libgssapi-krb5-2	CVE-2018-5709	低危	1.18.3-6+deb11u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libgssapi-krb5-2	CVE-2024-26458	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libgssapi-krb5-2	CVE-2024-26461	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libjbig0	CVE-2017-9937	低危	2.1-3.1+b2		libtiff: memory malloc failure in tif_jbig.c could cause DOS. 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-9937 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2017-06-26 12:29 修改: 2023-11-07 02:50
curl	CVE-2021-22922	低危	7.74.0-1.3+deb11u12		curl: Content not matching hash in Metalink is not being discarded 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-22922 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2021-08-05 21:15 修改: 2024-03-27 15:12
libk5crypto3	CVE-2018-5709	低危	1.18.3-6+deb11u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libk5crypto3	CVE-2024-26458	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libk5crypto3	CVE-2024-26461	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-08-14 16:35
libkrb5-3	CVE-2018-5709	低危	1.18.3-6+deb11u5		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2018-01-16 09:29 修改: 2023-11-07 02:58
libkrb5-3	CVE-2024-26458	低危	1.18.3-6+deb11u5		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2024-02-29 01:44 修改: 2024-05-14 15:09
libpython3.9-stdlib	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
libpython3.9-stdlib	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
libpython3.9-stdlib	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
libpython3.9-stdlib	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
python3.9-minimal	CVE-2020-27619	低危	3.9.2-1		python: Unsafe use of eval() on data retrieved via HTTP in the test suite 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-27619 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2020-10-22 03:16 修改: 2024-02-03 07:15
python3.9-minimal	CVE-2021-28861	低危	3.9.2-1		python: open redirection vulnerability in lib/http/server.py may lead to information disclosure 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-28861 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-23 01:15 修改: 2024-08-03 22:15
python3.9-minimal	CVE-2022-37454	低危	3.9.2-1		XKCP: buffer overflow in the SHA-3 reference implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37454 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-10-21 06:15 修改: 2023-05-03 11:15
python3.9-minimal	CVE-2024-4032	低危	3.9.2-1		python: incorrect IPv4 and IPv6 private ranges 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4032 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-17 15:15 修改: 2024-08-29 21:35
python3.9-minimal	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
sysvinit-utils	TEMP-0517018-A83CE6	低危	2.96-7+deb11u1		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
tar	CVE-2005-2541	低危	1.34+dfsg-1+deb11u1		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2005-08-10 04:00 修改: 2023-11-07 01:57
tar	TEMP-0290435-0B57B5	低危	1.34+dfsg-1+deb11u1		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
unzip	CVE-2021-4217	低危	6.0-26+deb11u1		unzip: Null pointer dereference in Unicode strings code 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4217 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2022-08-24 16:15 修改: 2022-11-29 15:45
util-linux	CVE-2022-0563	低危	2.36.1-8+deb11u2		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2022-02-21 19:15 修改: 2024-01-07 09:15
libpython3.9-stdlib	CVE-2024-5642	低危	3.9.2-1		python: Invalid value for OpenSSL API may cause Buffer over-read when NPN is used 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5642 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-27 21:15 修改: 2024-07-28 14:15
libquadmath0	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-13 09:15 修改: 2024-08-02 08:15
libsepol1	CVE-2021-36084	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084 镜像层: sha256:bf63823f8c99230524222455e257256ec7cf0963d3be83782d0a3499638619c2 发布日期: 2021-07-01 03:15 修改: 2023-11-07 03:36
libexpat1	CVE-2024-50602	未知	2.2.10-2+deb11u5		An issue was discovered in libexpat before 2.6.4. There is a crash wit ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-50602 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-10-27 05:15 修改: 2024-10-27 05:15

Python (python-pkg)

低危漏洞:0

中危漏洞:4

高危漏洞:2

严重漏洞:0

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
onnx	CVE-2024-27318	高危	1.14.0	1.16.0	CVE-2024-27318 affecting package pytorch for versions less than 2.0.0-6 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27318 镜像层: sha256:d890fc1df2845fed34b09672cd65ce0b1810ecf19b3f874faff094a4bf0da23b 发布日期: 2024-02-23 18:15 修改: 2024-03-30 02:15
onnx	CVE-2024-5187	高危	1.14.0	1.17.0	A vulnerability in the `download_model_with_test_data` function of the ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5187 镜像层: sha256:d890fc1df2845fed34b09672cd65ce0b1810ecf19b3f874faff094a4bf0da23b 发布日期: 2024-06-06 19:16 修改: 2024-10-23 13:36
cryptography	GHSA-h4gh-qq45-vh27	中危	43.0.0	43.0.1	pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels 漏洞详情: https://github.com/advisories/GHSA-h4gh-qq45-vh27 镜像层: sha256:b92f78548db11f2d6a2ddc9a6e4058b018db6babead283c02c6b9b79f07c7ad2 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
Werkzeug	CVE-2024-49766	中危	3.0.3	3.0.6	werkzeug: python-werkzeug: Werkzeug safe_join not safe on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49766 镜像层: sha256:b92f78548db11f2d6a2ddc9a6e4058b018db6babead283c02c6b9b79f07c7ad2 发布日期: 2024-10-25 20:15 修改: 2024-10-25 20:15
Werkzeug	CVE-2024-49767	中危	3.0.3	3.0.6	werkzeug: python-werkzeug: Werkzeug possible resource exhaustion when parsing file data in forms 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-49767 镜像层: sha256:b92f78548db11f2d6a2ddc9a6e4058b018db6babead283c02c6b9b79f07c7ad2 发布日期: 2024-10-25 20:15 修改: 2024-10-25 20:15
onnx	CVE-2024-27319	中危	1.14.0	1.16.0	CVE-2024-27319 affecting package pytorch for versions less than 2.0.0-4 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-27319 镜像层: sha256:d890fc1df2845fed34b09672cd65ce0b1810ecf19b3f874faff094a4bf0da23b 发布日期: 2024-02-23 18:15 修改: 2024-03-30 02:15

usr/local/bin/yq (gobinary)

低危漏洞:0

中危漏洞:18

高危漏洞:8

严重漏洞:2

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2023-24540	严重	1.20.3	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:08
stdlib	CVE-2024-24790	严重	1.20.3	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/net	CVE-2023-39325	高危	v0.8.0	0.17.0	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-24539	高危	1.20.3	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:08
stdlib	CVE-2023-29400	高危	1.20.3	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:11
stdlib	CVE-2023-29403	高危	1.20.3	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-06-08 21:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39325	高危	1.20.3	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.20.3	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45288	高危	1.20.3	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-34156	高危	1.20.3	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/net	CVE-2023-3978	中危	v0.8.0	0.13.0	golang.org/x/net/html: Cross site scripting 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3978 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-02 20:15 修改: 2023-11-07 04:20
golang.org/x/net	CVE-2023-44487	中危	v0.8.0	0.17.0	HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-44487 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-10-10 14:15 修改: 2024-08-14 19:57
golang.org/x/net	CVE-2023-45288	中危	v0.8.0	0.23.0	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2023-29406	中危	1.20.3	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-07-11 20:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-29409	中危	1.20.3	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-08-02 20:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39318	中危	1.20.3	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.20.3	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.20.3	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.20.3	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.20.3	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2023-45290	中危	1.20.3	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24783	中危	1.20.3	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24784	中危	1.20.3	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.20.3	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.20.3	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.20.3	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.20.3	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib	CVE-2024-34158	中危	1.20.3	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:12b85a052a70046e84ad82777067b6cd15bf42d35657385ce0fbdfc0308748a4 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35

usr/local/tempio/bin/tempio (gobinary)

低危漏洞:1

中危漏洞:23

高危漏洞:40

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	1.17.1	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-02-11 01:15 修改: 2023-04-20 00:15
stdlib	CVE-2023-24538	严重	1.17.1	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24540	严重	1.17.1	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:08
stdlib	CVE-2024-24790	严重	1.17.1	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-06-05 16:15 修改: 2024-09-03 18:35
golang.org/x/crypto	CVE-2021-43565	高危	v0.0.0-20201221181555-eec23a3978ad	0.0.0-20211202192323-5770296d904e	golang.org/x/crypto: empty plaintext packet causes panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-43565 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-09-06 18:15 修改: 2023-11-07 03:39
golang.org/x/crypto	CVE-2022-27191	高危	v0.0.0-20201221181555-eec23a3978ad	0.0.0-20220314234659-1baeb1ce4c0b	golang: crash in a golang.org/x/crypto/ssh server 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27191 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-03-18 07:15 修改: 2023-11-07 03:45
stdlib	CVE-2021-41771	高危	1.17.1	1.16.10, 1.17.3	golang: debug/macho: invalid dynamic symbol table command can cause panic 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41771 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2021-11-08 06:15 修改: 2023-11-07 03:39
stdlib	CVE-2021-41772	高危	1.17.1	1.16.10, 1.17.3	golang: archive/zip: Reader.Open panics on empty string 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-41772 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2021-11-08 06:15 修改: 2023-11-07 03:39
stdlib	CVE-2021-44716	高危	1.17.1	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-01-01 05:15 修改: 2023-04-20 00:15
stdlib	CVE-2022-23772	高危	1.17.1	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-02-11 01:15 修改: 2022-11-09 21:51
stdlib	CVE-2022-24675	高危	1.17.1	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-04-20 10:15 修改: 2023-11-07 03:44
stdlib	CVE-2022-24921	高危	1.17.1	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-03-05 20:15 修改: 2023-08-08 14:22
stdlib	CVE-2022-27664	高危	1.17.1	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-09-06 18:15 修改: 2023-11-07 03:45
stdlib	CVE-2022-28131	高危	1.17.1	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:45
stdlib	CVE-2022-28327	高危	1.17.1	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-04-20 10:15 修改: 2023-11-07 03:45
stdlib	CVE-2022-2879	高危	1.17.1	1.18.7, 1.19.2	golang: archive/tar: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-10-14 15:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-2880	高危	1.17.1	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-10-14 15:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-29804	高危	1.17.1	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:46
stdlib	CVE-2022-30580	高危	1.17.1	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30630	高危	1.17.1	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30631	高危	1.17.1	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30632	高危	1.17.1	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30633	高危	1.17.1	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30634	高危	1.17.1	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-07-15 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-30635	高危	1.17.1	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-32189	高危	1.17.1	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-03-03 15:39
stdlib	CVE-2022-41715	高危	1.17.1	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-10-14 15:16 修改: 2023-11-25 11:15
stdlib	CVE-2022-41716	高危	1.17.1	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-11-02 16:15 修改: 2023-11-07 03:52
stdlib	CVE-2022-41720	高危	1.17.1	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-12-07 17:15 修改: 2022-12-12 14:58
stdlib	CVE-2022-41722	高危	1.17.1	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-02-28 18:15 修改: 2023-11-07 03:52
stdlib	CVE-2022-41723	高危	1.17.1	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-41724	高危	1.17.1	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib	CVE-2022-41725	高危	1.17.1	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-02-28 18:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24534	高危	1.17.1	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24536	高危	1.17.1	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24537	高危	1.17.1	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-04-06 16:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-24539	高危	1.17.1	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:08
stdlib	CVE-2023-29400	高危	1.17.1	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-05-11 16:15 修改: 2023-11-07 04:11
stdlib	CVE-2023-29403	高危	1.17.1	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-06-08 21:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39325	高危	1.17.1	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-10-11 22:15 修改: 2024-04-28 04:15
stdlib	CVE-2023-45283	高危	1.17.1	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-11-09 17:15 修改: 2023-12-14 10:15
stdlib	CVE-2023-45287	高危	1.17.1	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-12-05 17:15 修改: 2024-01-12 14:15
stdlib	CVE-2023-45288	高危	1.17.1	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-04-04 21:15 修改: 2024-08-26 21:35
stdlib	CVE-2024-34156	高危	1.17.1	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-09-06 21:15 修改: 2024-09-09 15:35
golang.org/x/crypto	CVE-2023-48795	中危	v0.0.0-20201221181555-eec23a3978ad	0.17.0	ssh: Prefix truncation attack on Binary Packet Protocol (BPP) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-48795 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-12-18 16:15 修改: 2024-05-01 18:15
stdlib	CVE-2021-44717	中危	1.17.1	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-01-01 05:15 修改: 2023-08-08 14:22
stdlib	CVE-2022-1705	中危	1.17.1	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:42
stdlib	CVE-2022-1962	中危	1.17.1	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:42
stdlib	CVE-2022-29526	中危	1.17.1	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-06-23 17:15 修改: 2023-11-07 03:46
stdlib	CVE-2022-32148	中危	1.17.1	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47
stdlib	CVE-2022-41717	中危	1.17.1	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-12-08 20:15 修改: 2024-01-18 03:15
stdlib	CVE-2023-24532	中危	1.17.1	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-03-08 20:15 修改: 2023-11-07 04:08
stdlib	CVE-2023-29406	中危	1.17.1	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-07-11 20:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-29409	中危	1.17.1	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-08-02 20:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39318	中危	1.17.1	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39319	中危	1.17.1	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-09-08 17:15 修改: 2023-11-25 11:15
stdlib	CVE-2023-39326	中危	1.17.1	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-12-06 17:15 修改: 2024-01-20 04:15
stdlib	CVE-2023-45284	中危	1.17.1	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2023-11-09 17:15 修改: 2024-09-03 19:35
stdlib	CVE-2023-45289	中危	1.17.1	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2023-45290	中危	1.17.1	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24783	中危	1.17.1	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24784	中危	1.17.1	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-03-05 23:15 修改: 2024-08-05 21:35
stdlib	CVE-2024-24785	中危	1.17.1	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-03-05 23:15 修改: 2024-05-01 17:15
stdlib	CVE-2024-24789	中危	1.17.1	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-06-05 16:15 修改: 2024-07-03 01:48
stdlib	CVE-2024-24791	中危	1.17.1	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-07-02 22:15 修改: 2024-07-08 14:17
stdlib	CVE-2024-34155	中危	1.17.1	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-09-06 21:15 修改: 2024-09-09 13:03
stdlib	CVE-2024-34158	中危	1.17.1	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2024-09-06 21:15 修改: 2024-09-09 14:35
stdlib	CVE-2022-30629	低危	1.17.1	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:c48685dfe88020148cdc67981bdce78c677ad441cf2fd3156b42b9124f9b2af5 发布日期: 2022-08-10 20:15 修改: 2023-11-07 03:47