ghcr.io/o11ylite/o11ylite:2026.8.6-1140937 linux/amd64

ghcr.io/o11ylite/o11ylite:2026.8.6-1140937 - Trivy安全扫描结果 扫描时间: 2026-08-28 20:56
全部漏洞信息
低危漏洞:12 中危漏洞:37 高危漏洞:2 严重漏洞:0

系统OS: ubuntu 24.04 扫描引擎: Trivy 扫描时间: 2026-08-28 20:56

ghcr.io/o11ylite/o11ylite:2026.8.6-1140937 (ubuntu 24.04) (ubuntu)
低危漏洞:12 中危漏洞:32 高危漏洞:0 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
bsdutils CVE-2026-27456 中危 1:2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
diffutils CVE-2026-53910 中危 1:3.10-1build1 diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
libattr1 CVE-2026-54371 中危 1:2.5.2-1build1.1 attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 14:16 修改: 2026-08-27 13:18
libblkid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libexpat1 CVE-2025-66382 中危 2.6.1-2ubuntu0.4 libexpat: libexpat: Denial of service via crafted file processing

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-66382

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2025-11-28 07:15 修改: 2026-06-17 09:56
libmount1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libp11-kit0 CVE-2026-13757 中危 0.25.3-4ubuntu2.1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
libsmartcols1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libssl3t64 CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl3t64 CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libsystemd0 CVE-2026-15059 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd0 CVE-2026-16742 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libudev1 CVE-2026-15059 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 Local unprivileged users can terminate arbitrary local processes via a ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libudev1 CVE-2026-16742 中危 255.4-1ubuntu8.16 255.4-1ubuntu8.17 systemd-homed contains a local privilege escalation bug via arbitrary ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libuuid1 CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
mount CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
openssl CVE-2026-63072 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: heap buffer overflow in CMS key unwrapping

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
openssl CVE-2026-63076 中危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: invalid pointer dereference in CMP server via crafted protectionAlg

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
p11-kit CVE-2026-13757 中危 0.25.3-4ubuntu2.1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
p11-kit-modules CVE-2026-13757 中危 0.25.3-4ubuntu2.1 p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
perl-base CVE-2025-15649 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header

漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-12087 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base CVE-2026-13221 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Incorrect regular expression processing via large regular expressions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base CVE-2026-48959 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base CVE-2026-48962 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-base CVE-2026-57432 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl: Perl: Information disclosure via integer overflow in pack/unpack operations

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base CVE-2026-57433 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 Storable: Storable: Denial of Service via signed integer overflow in deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base CVE-2026-7017 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 HTTP::Tiny versions before 0.095 for Perl forward credential headers t ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
perl-base CVE-2026-9538 中危 5.38.2-3.2ubuntu0.3 5.38.2-3.2ubuntu0.4 perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
tar CVE-2026-18477 中危 1.35+dfsg-3ubuntu0.4 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-03 17:16 修改: 2026-08-21 13:16
tar CVE-2026-18508 中危 1.35+dfsg-3ubuntu0.4 tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-08-03 16:16 修改: 2026-08-21 13:16
util-linux CVE-2026-27456 中危 2.39.3-9ubuntu6.5 util-linux: TOCTOU in the mount program when setting up loop devices

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
login CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libssl3t64 CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libsystemd0 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libssl3t64 CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
openssl CVE-2026-54874 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: excessive memory use buffering DTLS records for a future epoch

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
openssl CVE-2026-63074 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 openssl: CMP indefinite cache growth of ExtraCerts

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
openssl CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
libssl3t64 CVE-2026-75803 低危 3.0.13-0ubuntu3.12 3.0.13-0ubuntu3.15 Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ...

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803

镜像层: sha256:aed91cc2c24e801442a6a3a52a160d28f5b69ae9f86547c775c658372838d573

发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
libudev1 CVE-2026-40228 低危 255.4-1ubuntu8.16 systemd: systemd-journald: Unintended output to user terminals via logger command

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
passwd CVE-2024-56433 低危 1:4.13+dfsg1-4ubuntu3.2 shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
libgcrypt20 CVE-2024-2236 低危 1.10.3-2ubuntu0.1 libgcrypt: vulnerable to Marvin Attack

漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
zlib1g CVE-2026-27171 低危 1:1.3.dfsg-3.1ubuntu2.1 zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171

镜像层: sha256:42724e448bf499ec7d4b3c21d6cc68fe665ef677ed393c3dbb5357394e89ff91

发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
Java (jar)
低危漏洞:0 中危漏洞:5 高危漏洞:2 严重漏洞:0
软件包 漏洞 安全状态 安装版本 修复版本 漏洞信息
org.eclipse.jetty.ee9:jetty-ee9-security CVE-2026-10050 高危 12.1.8 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:9631f124ce9777fb159e961a31a644a61a0989da0bdb27ed7aaf8e724882a5bb

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
org.eclipse.jetty:jetty-security CVE-2026-10050 高危 12.1.8 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 jetty-security: Eclipse Jetty: Authentication bypass via Digest authentication encoding collision

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10050

镜像层: sha256:9631f124ce9777fb159e961a31a644a61a0989da0bdb27ed7aaf8e724882a5bb

发布日期: 2026-08-04 11:22 修改: 2026-08-08 00:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-54515 中危 2.22.0 3.1.4, 2.18.9, 2.21.5, 2.22.1 jackson-databind: jackson-databind: Ignored properties can be unexpectedly modified

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54515

镜像层: sha256:9631f124ce9777fb159e961a31a644a61a0989da0bdb27ed7aaf8e724882a5bb

发布日期: 2026-06-23 21:17 修改: 2026-06-29 13:38
com.fasterxml.jackson.core:jackson-databind CVE-2026-59889 中危 2.22.0 2.21.5, 2.18.9, 2.22.1 jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserialization

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-59889

镜像层: sha256:9631f124ce9777fb159e961a31a644a61a0989da0bdb27ed7aaf8e724882a5bb

发布日期: 2026-07-14 21:17 修改: 2026-07-16 16:19
org.eclipse.jetty:jetty-server CVE-2026-10051 中危 12.1.8 12.0.36, 12.1.10 jetty: Eclipse Jetty: Information disclosure due to retained HTTP/1.1 trailers across connections

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-10051

镜像层: sha256:9631f124ce9777fb159e961a31a644a61a0989da0bdb27ed7aaf8e724882a5bb

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:41
org.eclipse.jetty:jetty-server CVE-2026-6790 中危 12.1.8 12.0.35, 12.1.9 jetty: Jetty: Improper Host header validation can lead to request routing issues

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6790

镜像层: sha256:9631f124ce9777fb159e961a31a644a61a0989da0bdb27ed7aaf8e724882a5bb

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:35
org.eclipse.jetty:jetty-util CVE-2026-8384 中危 12.1.8 12.0.35, 12.1.9 jetty: Eclipse Jetty: Path confusion vulnerability may lead to information disclosure in web applications

漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8384

镜像层: sha256:9631f124ce9777fb159e961a31a644a61a0989da0bdb27ed7aaf8e724882a5bb

发布日期: 2026-07-14 09:16 修改: 2026-07-14 18:39
检测到您正在使用广告拦截插件，本站为公益站点，依赖广告维持运转 🙏 查看如何关闭 ×