| bsdutils |
CVE-2026-27456 |
中危 |
1:2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| diffutils |
CVE-2026-53910 |
中危 |
1:3.10-1build1 |
|
diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
|
| git |
CVE-2024-52005 |
中危 |
1:2.43.0-1ubuntu7.3 |
|
git: The sideband payload is passed unfiltered to the terminal in git
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
|
| git-man |
CVE-2024-52005 |
中危 |
1:2.43.0-1ubuntu7.3 |
|
git: The sideband payload is passed unfiltered to the terminal in git
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52005
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-01-15 18:15 修改: 2026-06-17 08:06
|
| libattr1 |
CVE-2026-54371 |
中危 |
1:2.5.2-1build1.1 |
|
attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-06-29 14:16 修改: 2026-08-27 13:18
|
| libavahi-client3 |
CVE-2025-59529 |
中危 |
0.8-13ubuntu6.2 |
|
avahi: simple clients denial-of-service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
|
| libavahi-common-data |
CVE-2025-59529 |
中危 |
0.8-13ubuntu6.2 |
|
avahi: simple clients denial-of-service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
|
| libavahi-common3 |
CVE-2025-59529 |
中危 |
0.8-13ubuntu6.2 |
|
avahi: simple clients denial-of-service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-59529
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2025-12-18 21:15 修改: 2026-06-17 09:46
|
| libblkid1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| libdevmapper1.02.1 |
CVE-2026-19617 |
中危 |
2:1.02.185-3ubuntu3.2 |
|
libdm: lvm2: libdm: Denial of Service via uncontrolled recursion in config parser
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19617
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-08-14 06:17 修改: 2026-08-26 14:17
|
| libduktape207 |
CVE-2026-12216 |
中危 |
2.7.0+tests-0ubuntu3 |
|
Duktape: svaarala duktape duk_api_bytecode.c memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12216
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-15 04:16 修改: 2026-07-24 12:10
|
| libexpat1 |
CVE-2025-66382 |
中危 |
2.6.1-2ubuntu0.4 |
|
libexpat: libexpat: Denial of service via crafted file processing
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
|
| libfdisk1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| libmount1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| libp11-kit0 |
CVE-2026-13757 |
中危 |
0.25.3-4ubuntu2.1 |
|
p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
|
| libperl5.38t64 |
CVE-2025-15649 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| libperl5.38t64 |
CVE-2026-12087 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
|
| libperl5.38t64 |
CVE-2026-13221 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Incorrect regular expression processing via large regular expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
|
| libperl5.38t64 |
CVE-2026-48959 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| libperl5.38t64 |
CVE-2026-48962 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
|
| libperl5.38t64 |
CVE-2026-57432 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Information disclosure via integer overflow in pack/unpack operations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
|
| libperl5.38t64 |
CVE-2026-57433 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
Storable: Storable: Denial of Service via signed integer overflow in deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
|
| libperl5.38t64 |
CVE-2026-7017 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
|
| libperl5.38t64 |
CVE-2026-9538 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
|
| libpixman-1-0 |
CVE-2023-37769 |
中危 |
0.42.2-1build1 |
|
stress-test master commit e4c878 was discovered to contain a FPE vulne ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-37769
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2023-07-17 20:15 修改: 2026-06-17 06:08
|
| libsmartcols1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| libssl3t64 |
CVE-2026-63072 |
中危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| libssl3t64 |
CVE-2026-63076 |
中危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| libuuid1 |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| mount |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| openssh-client |
CVE-2026-55655 |
中危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| openssh-server |
CVE-2026-55655 |
中危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| openssh-sftp-server |
CVE-2026-55655 |
中危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| openssl |
CVE-2026-63072 |
中危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: heap buffer overflow in CMS key unwrapping
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| openssl |
CVE-2026-63076 |
中危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: invalid pointer dereference in CMP server via crafted protectionAlg
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| perl |
CVE-2025-15649 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| perl |
CVE-2026-12087 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
|
| perl |
CVE-2026-13221 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Incorrect regular expression processing via large regular expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
|
| perl |
CVE-2026-48959 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| perl |
CVE-2026-48962 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
|
| perl |
CVE-2026-57432 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Information disclosure via integer overflow in pack/unpack operations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
|
| perl |
CVE-2026-57433 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
Storable: Storable: Denial of Service via signed integer overflow in deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
|
| perl |
CVE-2026-7017 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
|
| perl |
CVE-2026-9538 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
|
| perl-base |
CVE-2025-15649 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| perl-base |
CVE-2026-12087 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
|
| perl-base |
CVE-2026-13221 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Incorrect regular expression processing via large regular expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
|
| perl-base |
CVE-2026-48959 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| perl-base |
CVE-2026-48962 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
|
| perl-base |
CVE-2026-57432 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Information disclosure via integer overflow in pack/unpack operations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
|
| perl-base |
CVE-2026-57433 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
Storable: Storable: Denial of Service via signed integer overflow in deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
|
| perl-base |
CVE-2026-7017 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
|
| perl-base |
CVE-2026-9538 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
|
| perl-modules-5.38 |
CVE-2025-15649 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| perl-modules-5.38 |
CVE-2026-12087 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
|
| perl-modules-5.38 |
CVE-2026-13221 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Incorrect regular expression processing via large regular expressions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
|
| perl-modules-5.38 |
CVE-2026-48959 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
|
| perl-modules-5.38 |
CVE-2026-48962 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
|
| perl-modules-5.38 |
CVE-2026-57432 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl: Perl: Information disclosure via integer overflow in pack/unpack operations
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
|
| perl-modules-5.38 |
CVE-2026-57433 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
Storable: Storable: Denial of Service via signed integer overflow in deserialization
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
|
| perl-modules-5.38 |
CVE-2026-7017 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
|
| perl-modules-5.38 |
CVE-2026-9538 |
中危 |
5.38.2-3.2ubuntu0.3 |
5.38.2-3.2ubuntu0.4 |
perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
|
| python3-pip |
CVE-2024-35195 |
中危 |
24.0+dfsg-1ubuntu1.3 |
|
requests: subsequent requests to the same host ignore cert verification
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-35195
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2024-05-20 21:15 修改: 2026-06-17 07:34
|
| python3-pip |
CVE-2025-66418 |
中危 |
24.0+dfsg-1ubuntu1.3 |
|
urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66418
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-12-05 16:15 修改: 2026-06-17 09:56
|
| python3-pip |
CVE-2025-66471 |
中危 |
24.0+dfsg-1ubuntu1.3 |
|
urllib3: urllib3 Streaming API improperly handles highly compressed data
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66471
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-12-05 17:16 修改: 2026-06-17 09:56
|
| python3-pip |
CVE-2026-21441 |
中危 |
24.0+dfsg-1ubuntu1.3 |
|
urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-21441
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-01-07 22:15 修改: 2026-08-26 13:17
|
| python3-wheel |
CVE-2026-24049 |
中危 |
0.42.0-2 |
|
wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-24049
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-01-22 05:16 修改: 2026-08-26 13:17
|
| ssh |
CVE-2026-55655 |
中危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55655
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| tar |
CVE-2026-18477 |
中危 |
1.35+dfsg-3ubuntu0.4 |
|
tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-08-03 17:16 修改: 2026-08-21 13:16
|
| tar |
CVE-2026-18508 |
中危 |
1.35+dfsg-3ubuntu0.4 |
|
tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-08-03 16:16 修改: 2026-08-21 13:16
|
| util-linux |
CVE-2026-27456 |
中危 |
2.39.3-9ubuntu6.5 |
|
util-linux: TOCTOU in the mount program when setting up loop devices
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
|
| wget |
CVE-2021-31879 |
中危 |
1.21.4-1ubuntu4.4 |
|
wget: authorization header disclosure on redirect
漏洞详情: https://avd.aquasec.com/nvd/cve-2021-31879
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2021-04-29 05:15 修改: 2026-06-17 03:52
|
| xdg-utils |
CVE-2025-52968 |
中危 |
1.1.3-4.1ubuntu3 |
|
xdg-utils: xdg-open bypassing SameSite=Strict
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-52968
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2025-06-23 15:15 修改: 2026-06-17 09:37
|
| openssl |
CVE-2026-63074 |
低危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| openssl |
CVE-2026-75803 |
低危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
|
| packagekit |
CVE-2022-0987 |
低危 |
1.2.8-2ubuntu1.5 |
|
PackageKit: Information Disclosure in Transaction Interface via timing
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0987
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2022-06-28 17:15 修改: 2026-06-17 04:21
|
| packagekit |
CVE-2024-0217 |
低危 |
1.2.8-2ubuntu1.5 |
|
PackageKitd: Use-After-Free in Idle Function Callback
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0217
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2024-01-03 17:15 修改: 2026-06-17 06:53
|
| passwd |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libavahi-common-data |
CVE-2024-52616 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Predictable Transaction IDs
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| gir1.2-packagekitglib-1.0 |
CVE-2024-0217 |
低危 |
1.2.8-2ubuntu1.5 |
|
PackageKitd: Use-After-Free in Idle Function Callback
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0217
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2024-01-03 17:15 修改: 2026-06-17 06:53
|
| libpackagekit-glib2-18 |
CVE-2022-0987 |
低危 |
1.2.8-2ubuntu1.5 |
|
PackageKit: Information Disclosure in Transaction Interface via timing
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0987
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2022-06-28 17:15 修改: 2026-06-17 04:21
|
| libpackagekit-glib2-18 |
CVE-2024-0217 |
低危 |
1.2.8-2ubuntu1.5 |
|
PackageKitd: Use-After-Free in Idle Function Callback
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0217
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2024-01-03 17:15 修改: 2026-06-17 06:53
|
| libpam-systemd |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libavahi-common3 |
CVE-2024-52615 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Uses Constant Source Port
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libavahi-common3 |
CVE-2024-52616 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Predictable Transaction IDs
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| curl |
CVE-2026-8932 |
低危 |
8.5.0-2ubuntu10.12 |
8.5.0-2ubuntu10.13 |
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
|
| libcairo-gobject2 |
CVE-2017-7475 |
低危 |
1.18.0-3build1 |
|
cairo: NULL pointer dereference with a crafted font file
漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
|
| libcairo-gobject2 |
CVE-2018-18064 |
低危 |
1.18.0-3build1 |
|
cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
|
| libcairo2 |
CVE-2017-7475 |
低危 |
1.18.0-3build1 |
|
cairo: NULL pointer dereference with a crafted font file
漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7475
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2017-05-19 20:29 修改: 2026-06-17 01:24
|
| libcairo2 |
CVE-2018-18064 |
低危 |
1.18.0-3build1 |
|
cairo: Stack-based buffer overflow via parsing of crafted WebKitGTK+ document
漏洞详情: https://avd.aquasec.com/nvd/cve-2018-18064
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2018-10-08 18:29 修改: 2026-06-17 01:46
|
| libcurl3t64-gnutls |
CVE-2026-8932 |
低危 |
8.5.0-2ubuntu10.12 |
8.5.0-2ubuntu10.13 |
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
|
| libcurl4t64 |
CVE-2026-8932 |
低危 |
8.5.0-2ubuntu10.12 |
8.5.0-2ubuntu10.13 |
libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8932
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-07-03 07:16 修改: 2026-07-07 23:18
|
| libavahi-client3 |
CVE-2024-52615 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Uses Constant Source Port
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libpolkit-agent-1-0 |
CVE-2016-2568 |
低危 |
124-2ubuntu1.24.04.3 |
|
polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl
漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2568
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2017-02-13 18:59 修改: 2026-06-17 00:44
|
| libpolkit-gobject-1-0 |
CVE-2016-2568 |
低危 |
124-2ubuntu1.24.04.3 |
|
polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl
漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2568
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2017-02-13 18:59 修改: 2026-06-17 00:44
|
| libavahi-client3 |
CVE-2024-52616 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Predictable Transaction IDs
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52616
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| libdw1t64 |
CVE-2025-1352 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
|
| libdw1t64 |
CVE-2025-1376 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
|
| libssl3t64 |
CVE-2026-54874 |
低危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| libssl3t64 |
CVE-2026-63074 |
低危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: CMP indefinite cache growth of ExtraCerts
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| libssl3t64 |
CVE-2026-75803 |
低危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
|
| libsystemd-shared |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libsystemd0 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libudev1 |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libelf1t64 |
CVE-2025-1352 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-readelf libdw_alloc.c __libdw_thread_tail memory corruption
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1352
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-02-16 15:15 修改: 2026-06-17 08:38
|
| polkitd |
CVE-2016-2568 |
低危 |
124-2ubuntu1.24.04.3 |
|
polkit: Program run via pkexec as unprivileged user can escape to parent session via TIOCSTI ioctl
漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2568
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2017-02-13 18:59 修改: 2026-06-17 00:44
|
| login |
CVE-2024-56433 |
低危 |
1:4.13+dfsg1-4ubuntu3.2 |
|
shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
|
| libelf1t64 |
CVE-2025-1376 |
低危 |
0.190-1.1ubuntu0.1 |
|
elfutils: GNU elfutils eu-strip elf_strptr.c elf_strptr denial of service
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-1376
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-02-17 05:15 修改: 2026-06-17 08:39
|
| gir1.2-packagekitglib-1.0 |
CVE-2022-0987 |
低危 |
1.2.8-2ubuntu1.5 |
|
PackageKit: Information Disclosure in Transaction Interface via timing
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0987
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2022-06-28 17:15 修改: 2026-06-17 04:21
|
| openssh-client |
CVE-2026-55654 |
低危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| python3-pip |
CVE-2026-1703 |
低危 |
24.0+dfsg-1ubuntu1.3 |
|
pip: pip: Information disclosure via path traversal when installing crafted wheel archives
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-1703
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-02-02 15:16 修改: 2026-06-17 10:16
|
| libavahi-common-data |
CVE-2024-52615 |
低危 |
0.8-13ubuntu6.2 |
|
avahi: Avahi Wide-Area DNS Uses Constant Source Port
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-52615
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2024-11-21 21:15 修改: 2026-06-29 23:16
|
| openssh-server |
CVE-2026-55654 |
低危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| ssh |
CVE-2026-55654 |
低危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| systemd |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| systemd-dev |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| systemd-sysv |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libgcrypt20 |
CVE-2024-2236 |
低危 |
1.10.3-2ubuntu0.1 |
|
libgcrypt: vulnerable to Marvin Attack
漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
|
| openssh-sftp-server |
CVE-2026-55654 |
低危 |
1:9.6p1-3ubuntu13.18 |
|
openssh: Heap out-of-bounds read in Red Hat Enterprise Linux versions of OpenSSH GSSAPI indicator cleanup due to missing NULL sentinel termination
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-55654
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-06-23 04:17 修改: 2026-08-25 10:18
|
| udev |
CVE-2026-40228 |
低危 |
255.4-1ubuntu8.17 |
|
systemd: systemd-journald: Unintended output to user terminals via logger command
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
|
| libharfbuzz0b |
CVE-2026-22693 |
低危 |
8.3.0-2build2 |
|
harfbuzz: Null Pointer Dereference in harfbuzz
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22693
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2026-01-10 06:15 修改: 2026-06-17 10:20
|
| libicu74 |
CVE-2025-5222 |
低危 |
74.2-1ubuntu3.1 |
|
icu: Stack buffer overflow in the SRBRoot::addTag function
漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5222
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2025-05-27 21:15 修改: 2026-08-26 07:16
|
| openssl |
CVE-2026-54874 |
低危 |
3.0.13-0ubuntu3.12 |
3.0.13-0ubuntu3.15 |
openssl: excessive memory use buffering DTLS records for a future epoch
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
|
| xdg-utils |
CVE-2022-4055 |
低危 |
1.1.3-4.1ubuntu3 |
|
xdg-utils: improper parse of mailto URIs allows bypass of Thunderbird security mechanism for attachments
漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4055
镜像层: sha256:a2937d65aa5dffab2f4bd9bb22a9c42cbacc1bdc617e5e273b2da275cf9ea316
发布日期: 2022-11-19 00:15 修改: 2026-06-17 05:19
|
| xserver-common |
CVE-2023-5574 |
低危 |
2:21.1.12-1ubuntu1.6 |
|
xorg-x11-server: Use-after-free bug in DamageDestroy
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5574
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2023-10-25 20:15 修改: 2026-06-23 18:17
|
| xvfb |
CVE-2023-5574 |
低危 |
2:21.1.12-1ubuntu1.6 |
|
xorg-x11-server: Use-after-free bug in DamageDestroy
漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5574
镜像层: sha256:05727f93bbe1453738dd6a7c6bc03a2484e36d0e16a8545a214342e4fbdbd91c
发布日期: 2023-10-25 20:15 修改: 2026-06-23 18:17
|
| zlib1g |
CVE-2026-27171 |
低危 |
1:1.3.dfsg-3.1ubuntu2.1 |
|
zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions
漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171
镜像层: sha256:b9a65b3c65ab22d490085bd0bf5490e2409da8748b406870f2463bdc41cd6795
发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
|