k8s.gcr.io/kube-proxy:v1.24.8 linux/amd64

k8s.gcr.io/kube-proxy:v1.24.8 - Trivy安全扫描结果扫描时间: 2026-08-27 09:07

全部漏洞信息

低危漏洞:128

中危漏洞:226

高危漏洞:169

严重漏洞:25

系统OS: debian 11.3 扫描引擎: Trivy 扫描时间: 2026-08-27 09:07

k8s.gcr.io/kube-proxy:v1.24.8 (debian 11.3) (debian)

低危漏洞:121

中危漏洞:127

高危漏洞:75

严重漏洞:16

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
dpkg	CVE-2022-1664	严重	1.20.9	1.20.10	Dpkg::Source::Archive in dpkg, the Debian package management system, b ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1664 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-05-26 14:15 修改: 2026-06-17 04:22
libdb5.3	CVE-2019-8457	严重	5.3.28+dfsg1-0.8		sqlite: heap out-of-bound read in function rtreenode() 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-8457 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-05-30 16:29 修改: 2026-06-17 02:42
libgnutls30	CVE-2026-33845	严重	3.7.1-5	3.7.1-5+deb11u10	gnutls: GnuTLS: Denial of Service via DTLS zero-length fragment 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33845 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-30 18:16 修改: 2026-08-25 16:16
libgnutls30	CVE-2026-42010	严重	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Authentication Bypass via NUL Character in Username 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42010 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-07 12:16 修改: 2026-08-25 13:18
libgssapi-krb5-2	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libk5crypto3	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libkrb5-3	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libkrb5support0	CVE-2024-37371	严重	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37371 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 23:15 修改: 2026-06-17 07:38
libpcre2-8-0	CVE-2022-1586	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1586 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22
libpcre2-8-0	CVE-2022-1587	严重	10.36-2	10.36-2+deb11u1	pcre2: Out-of-bounds read in get_recurse_data_length in pcre2_jit_compile.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1587 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-05-16 21:15 修改: 2026-06-17 04:22
libtasn1-6	CVE-2021-46848	严重	4.16.0-2	4.16.0-2+deb11u1	libtasn1: Out-of-bound access in ETYPE_OK 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46848 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-10-24 14:15 修改: 2026-06-17 04:15
perl-base	CVE-2026-13221	严重	5.32.1-4+deb11u2		perl: Perl: Incorrect regular expression processing via large regular expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13221 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-07-13 17:16 修改: 2026-07-14 18:15
perl-base	CVE-2026-42496	严重	5.32.1-4+deb11u2		perl-archive-tar: perl-archive-tar: Path traversal via crafted symlinks allows arbitrary file access 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42496 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 02:16 修改: 2026-07-24 10:10
perl-base	CVE-2026-8376	严重	5.32.1-4+deb11u2		perl: Perl: Heap buffer overflow when compiling regular expressions on 32-bit builds 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-8376 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 00:16 修改: 2026-07-23 11:10
zlib1g	CVE-2022-37434	严重	1:1.2.11.dfsg-2	1:1.2.11.dfsg-2+deb11u2	zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header extra field 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-37434 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-08-05 07:15 修改: 2026-07-14 12:16
zlib1g	CVE-2023-45853	严重	1:1.2.11.dfsg-2		zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45853 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-10-14 02:15 修改: 2026-07-14 13:17
bsdutils	CVE-2026-53615	高危	1:2.36.1-8+deb11u1		[Integer Overflow or Wraparound in libblkid/src/partitions/dos.c] 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53615 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libgcrypt20	CVE-2021-33560	高危	1.8.7-6		libgcrypt: mishandles ElGamal encryption because it lacks exponent blinding to address a side-channel attack against mpi_powm 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-33560 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-06-08 11:15 修改: 2026-06-17 03:54
bsdutils	CVE-2026-53613	高危	1:2.36.1-8+deb11u1		util-linux: util-linux: TOCTOU in the mount program via ancestor directory swap on target path 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53613 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
gpgv	CVE-2025-68973	高危	2.2.27-2+deb11u1	2.2.27-2+deb11u3	GnuPG: GnuPG: Information disclosure and potential arbitrary code execution via out-of-bounds write 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68973 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-12-28 17:16 修改: 2026-06-17 09:59
libgnutls30	CVE-2022-2509	高危	3.7.1-5	3.7.1-5+deb11u2	gnutls: Double free during gnutls_pkcs7_verify 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2509 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-08-01 14:15 修改: 2026-06-17 04:42
libgnutls30	CVE-2023-0361	高危	3.7.1-5	3.7.1-5+deb11u3	gnutls: timing side-channel in the TLS RSA key exchange code 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0361 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-02-15 18:15 修改: 2026-06-17 05:25
libgnutls30	CVE-2024-0553	高危	3.7.1-5	3.7.1-5+deb11u5	gnutls: incomplete fix for CVE-2023-5981 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0553 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-01-16 12:15 修改: 2026-06-17 06:53
libgnutls30	CVE-2024-0567	高危	3.7.1-5	3.7.1-5+deb11u5	gnutls: rejects certificate chain with distributed trust 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0567 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-01-16 14:15 修改: 2026-06-17 06:53
libgnutls30	CVE-2025-32988	高危	3.7.1-5	3.7.1-5+deb11u8	gnutls: Vulnerability in GnuTLS otherName SAN export 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32988 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-07-10 08:15 修改: 2026-08-21 13:16
libgnutls30	CVE-2025-32990	高危	3.7.1-5	3.7.1-5+deb11u8	gnutls: Vulnerability in GnuTLS certtool template parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-32990 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-07-10 10:15 修改: 2026-08-21 13:16
libgnutls30	CVE-2026-33846	高危	3.7.1-5	3.7.1-5+deb11u10	gnutls: GnuTLS: Denial of Service via heap buffer overflow in DTLS handshake fragment reassembly 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33846 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-04 10:15 修改: 2026-08-25 16:16
libgnutls30	CVE-2026-3833	高危	3.7.1-5	3.7.1-5+deb11u10	gnutls: GnuTLS: Policy bypass due to case-sensitive nameConstraints comparison 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3833 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-30 18:16 修改: 2026-08-25 10:18
libgnutls30	CVE-2026-42009	高危	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Denial of Service via DTLS packet reordering vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42009 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-18 13:16 修改: 2026-08-25 16:16
gzip	CVE-2022-1271	高危	1.10-4	1.10-4+deb11u1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22
libgssapi-krb5-2	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libgssapi-krb5-2	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libgssapi-krb5-2	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libgssapi-krb5-2	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
gzip	CVE-2026-41992	高危	1.10-4		GNU gzip contains a global buffer overflow vulnerability in the LZH de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41992 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-29 12:16 修改: 2026-08-25 04:18
libk5crypto3	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libk5crypto3	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libk5crypto3	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libk5crypto3	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libacl1	CVE-2026-54369	高危	2.2.53-10		acl: Symlink traversal privilege escalation via libacl functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54369 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-29 14:16 修改: 2026-08-25 13:19
libkrb5-3	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libkrb5-3	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libkrb5-3	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5-3	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
libc-bin	CVE-2021-3999	高危	2.31-13+deb11u3	2.31-13+deb11u4	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06
libkrb5support0	CVE-2022-42898	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u3	krb5: integer overflow vulnerabilities in PAC parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-42898 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-12-25 06:15 修改: 2026-06-17 05:05
libkrb5support0	CVE-2024-37370	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u5	krb5: GSS message token handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-37370 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-28 22:15 修改: 2026-06-17 07:38
libkrb5support0	CVE-2026-40355	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5: Denial of Service via NULL pointer dereference in NegoEx mechanism 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40355 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 06:16 修改: 2026-07-14 13:18
libkrb5support0	CVE-2026-40356	高危	1.18.3-6+deb11u1	1.18.3-6+deb11u8	krb5: MIT Kerberos 5 (krb5): Denial of Service via integer underflow and out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40356 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 07:16 修改: 2026-07-08 12:48
liblzma5	CVE-2022-1271	高危	5.2.5-2	5.2.5-2.1~deb11u1	gzip: arbitrary-file-write vulnerability 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1271 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-08-31 16:15 修改: 2026-06-17 04:22
libpam-modules	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18
libpam-modules-bin	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18
libpam-runtime	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18
libpam0g	CVE-2025-6020	高危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	linux-pam: Linux-pam directory Traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6020 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-06-17 13:15 修改: 2026-08-25 06:18
libc-bin	CVE-2023-4911	高危	2.31-13+deb11u3	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38
libc-bin	CVE-2024-2961	高危	2.31-13+deb11u3	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
libssl1.1	CVE-2022-1292	高危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u2	openssl: c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1292 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-05-03 16:15 修改: 2026-06-17 04:22
libssl1.1	CVE-2022-2068	高危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u3	openssl: the c_rehash script allows command injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2068 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-06-21 15:15 修改: 2026-06-17 04:41
libssl1.1	CVE-2022-4450	高危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u4	openssl: double free after calling PEM_read_bio_ex 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4450 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libssl1.1	CVE-2023-0215	高危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u4	openssl: use-after-free following BIO_new_NDEF 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0215 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-0286	高危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u4	openssl: X.400 address type confusion in X.509 GeneralName 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0286 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-0464	高危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u5	openssl: Denial of service by excessive resource usage in verifying X509 policy constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0464 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-03-22 17:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2025-69421	高危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via malformed PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69421 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl1.1	CVE-2026-14456	高危	1.1.1n-0+deb11u1		openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-14456 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-13 15:19 修改: 2026-08-13 18:17
libssl1.1	CVE-2026-28387	高危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u7	openssl: OpenSSL: Arbitrary code execution due to use-after-free in DANE TLSA authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28387 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl1.1	CVE-2026-28388	高危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in delta CRL processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28388 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl1.1	CVE-2026-28389	高危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service vulnerability in CMS processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28389 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl1.1	CVE-2026-28390	高危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u7	openssl: OpenSSL: Denial of Service due to NULL pointer dereference in CMS EnvelopedData processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-28390 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-07 22:16 修改: 2026-07-24 23:10
libssl1.1	CVE-2026-45447	高危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u8	openssl: Heap Use-After-Free in OpenSSL PKCS7_verify() 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-45447 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-09 17:17 修改: 2026-08-25 13:19
libsystemd0	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39
libsystemd0	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40
libc-bin	CVE-2024-33599	高危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libtirpc-common	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-07-20 06:15 修改: 2026-06-17 04:15
libtirpc3	CVE-2021-46828	高危	1.3.1-1	1.3.1-1+deb11u1	libtirpc: DoS vulnerability with lots of connections 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-46828 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-07-20 06:15 修改: 2026-06-17 04:15
libudev1	CVE-2023-50387	高危	247.3-7	247.3-7+deb11u6	bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50387 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:39
libudev1	CVE-2023-50868	高危	247.3-7	247.3-7+deb11u6	bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-50868 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-14 16:15 修改: 2026-06-17 06:40
libzstd1	CVE-2022-4899	高危	1.4.8+dfsg-2.1		zstd: mysql: buffer overrun in util.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4899 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-03-31 20:15 修改: 2026-06-17 05:22
libc6	CVE-2021-3999	高危	2.31-13+deb11u3	2.31-13+deb11u4	glibc: Off-by-one buffer overflow/underflow in getcwd() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-3999 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:06
libc6	CVE-2023-4911	高危	2.31-13+deb11u3	2.31-13+deb11u7	glibc: buffer overflow in ld.so leading to privilege escalation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4911 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-10-03 18:15 修改: 2026-06-17 06:38
libc6	CVE-2024-2961	高危	2.31-13+deb11u3	2.31-13+deb11u9	glibc: Out of bounds write in iconv may lead to remote code execution 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2961 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-04-17 18:15 修改: 2026-06-17 07:25
perl-base	CVE-2020-16156	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl-CPAN: Bypass of verification of signatures in CHECKSUMS files 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-16156 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-12-13 18:15 修改: 2026-06-17 02:57
perl-base	CVE-2023-31484	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u4	perl: CPAN.pm does not verify TLS certificates when downloading distributions over HTTPS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31484 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
perl-base	CVE-2023-47038	高危	5.32.1-4+deb11u2	5.32.1-4+deb11u3	perl: Write past buffer end via illegal user-defined Unicode property 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-47038 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-12-18 14:15 修改: 2026-06-17 06:32
perl-base	CVE-2026-42497	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Arbitrary file modification via crafted hardlinks during archive extraction 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42497 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 02:16 修改: 2026-07-24 11:10
perl-base	CVE-2026-48962	高危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Arbitrary code execution via attacker-controlled output glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48962 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-27 04:16 修改: 2026-08-05 13:23
perl-base	CVE-2026-57432	高危	5.32.1-4+deb11u2		perl: Perl: Information disclosure via integer overflow in pack/unpack operations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57432 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-07-13 17:17 修改: 2026-07-14 18:04
perl-base	CVE-2026-57433	高危	5.32.1-4+deb11u2		Storable: Storable: Denial of Service via signed integer overflow in deserialization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-57433 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-07-13 17:17 修改: 2026-07-14 17:47
perl-base	CVE-2026-9538	高危	5.32.1-4+deb11u2		perl-Archive-Tar: perl-Archive-Tar: Denial of Service via crafted tar header with large entry size 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9538 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 02:16 修改: 2026-07-23 11:10
libc6	CVE-2024-33599	高危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: stack-based buffer overflow in netgroup cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33599 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libcom-err2	CVE-2022-1304	高危	1.46.2-2	1.46.2-2+deb11u1	e2fsprogs: out-of-bounds read/write via crafted filesystem 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1304 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-04-14 21:15 修改: 2026-06-17 04:22
zlib1g	CVE-2018-25032	高危	1:1.2.11.dfsg-2	1:1.2.11.dfsg-2+deb11u1	zlib: A flaw found in zlib when compressing (not decompressing) certain inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-25032 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-03-25 09:15 修改: 2026-07-14 12:16
libc-bin	CVE-2026-6791	中危	2.31-13+deb11u3		glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
bsdutils	CVE-2026-13595	中危	1:2.36.1-8+deb11u1		util-linux: util-linux: heap use-after-free in libblkid nested partition probing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13595 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-29 09:16 修改: 2026-08-21 13:16
gzip	CVE-2026-41991	中危	1.10-4		gzip: gzip: Arbitrary file overwrite via insecure temporary file handling in gzexe utility 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-41991 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-29 12:16 修改: 2026-07-01 14:02
bsdutils	CVE-2026-27456	中危	1:2.36.1-8+deb11u1		util-linux: TOCTOU in the mount program when setting up loop devices 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27456 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-03 22:16 修改: 2026-07-24 22:10
libk5crypto3	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libk5crypto3	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libk5crypto3	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16
libacl1	CVE-2026-54370	中危	2.2.53-10		acl: TOCTOU Symlink Traversal via getfacl/setfacl 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54370 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-29 14:16 修改: 2026-06-29 19:22
libc6	CVE-2023-4806	中危	2.31-13+deb11u3		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16
libc6	CVE-2023-4813	中危	2.31-13+deb11u3		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
libc6	CVE-2024-33600	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc6	CVE-2025-0395	中危	2.31-13+deb11u3	2.31-13+deb11u12	glibc: buffer overflow in the GNU C Library's assert() 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
libkrb5-3	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libkrb5-3	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libkrb5-3	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16
libc6	CVE-2025-4802	中危	2.31-13+deb11u3	2.31-13+deb11u13	glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
libc6	CVE-2025-8058	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Double free in glibc 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
libc6	CVE-2026-0915	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Information disclosure via zero-valued network query 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
libc6	CVE-2026-19542	中危	2.31-13+deb11u3		glibc: Fix out-of-bounds array write in tdelete 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2026-4046	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libkrb5support0	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
libkrb5support0	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libkrb5support0	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16
libc6	CVE-2026-5435	中危	2.31-13+deb11u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
liblzma5	CVE-2026-34743	中危	5.2.5-2	5.2.5-2.1~deb11u2	xz: XZ Utils: Denial of Service via buffer overflow in index decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34743 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-02 19:21 修改: 2026-07-24 21:10
libp11-kit0	CVE-2026-13757	中危	0.23.22-1		p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-13757 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-29 19:16 修改: 2026-08-25 10:18
libp11-kit0	CVE-2026-18938	中危	0.23.22-1		p11-kit: Integer overflow in RPC attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18938 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-07 09:16 修改: 2026-08-14 19:07
libc6	CVE-2026-5450	中危	2.31-13+deb11u3		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libpam-modules	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam-modules	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-modules	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libc6	CVE-2026-5928	中危	2.31-13+deb11u3		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libpam-modules-bin	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam-modules-bin	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-modules-bin	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libc6	CVE-2026-6238	中危	2.31-13+deb11u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libpam-runtime	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam-runtime	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam-runtime	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libc6	CVE-2026-6368	中危	2.31-13+deb11u3		glibc: glibc: Process abort due to invalid memory in wordexp 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
libpam0g	CVE-2024-10041	中危	1.4.0-9+deb11u1		pam: libpam: Libpam vulnerable to read hashed password 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-10041 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-10-23 14:15 修改: 2026-06-30 00:16
libpam0g	CVE-2024-22365	中危	1.4.0-9+deb11u1	1.4.0-9+deb11u2	pam: allowing unprivileged user to block another user namespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-22365 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-06 08:15 修改: 2026-06-17 07:11
libpam0g	CVE-2026-54411	中危	1.4.0-9+deb11u1		linux-pam: Plaintext password recovery via timing discrepancy in pam_userdb module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54411 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-14 18:17 修改: 2026-08-10 12:17
libc6	CVE-2026-6791	中危	2.31-13+deb11u3		glibc: Glibc: Denial of Service via stack exhaustion during tilde expansion 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6791 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
libattr1	CVE-2026-54371	中危	1:2.4.48-6		attr: attr: Symlink Traversal Privilege Escalation via getfattr and setfattr 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54371 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-29 14:16 修改: 2026-08-24 13:19
libbz2-1.0	CVE-2026-42250	中危	1.0.8-4		bzip2: bzip2: Denial of Service in bzip2recover via a specially crafted file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42250 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-28 14:16 修改: 2026-06-17 10:47
gpgv	CVE-2022-34903	中危	2.2.27-2+deb11u1	2.2.27-2+deb11u2	gpg: Signature spoofing via status line injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-34903 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-07-01 22:15 修改: 2026-06-17 04:51
gpgv	CVE-2025-30258	中危	2.2.27-2+deb11u1		gnupg: verification DoS due to a malicious subkey in the keyring 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-30258 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-03-19 20:15 修改: 2026-06-17 09:08
gpgv	CVE-2025-68972	中危	2.2.27-2+deb11u1		gnupg: GnuPG: Signature bypass via form feed character in signed messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68972 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-12-27 23:15 修改: 2026-06-17 09:59
bsdutils	CVE-2026-3184	中危	1:2.36.1-8+deb11u1		util-linux: util-linux: Access control bypass due to improper hostname canonicalization 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-3184 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-03 19:17 修改: 2026-08-21 13:17
libc-bin	CVE-2023-4806	中危	2.31-13+deb11u3		glibc: potential use-after-free in getaddrinfo() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4806 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-18 17:15 修改: 2026-07-14 14:16
libc-bin	CVE-2023-4813	中危	2.31-13+deb11u3		glibc: potential use-after-free in gaih_inet() 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4813 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-12 22:15 修改: 2026-06-17 06:38
libc-bin	CVE-2024-33600	中危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: null pointer dereferences after failed netgroup cache insertion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33600 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin	CVE-2025-0395	中危	2.31-13+deb11u3	2.31-13+deb11u12	glibc: buffer overflow in the GNU C Library's assert() 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0395 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-01-22 13:15 修改: 2026-06-17 08:26
libc-bin	CVE-2025-4802	中危	2.31-13+deb11u3	2.31-13+deb11u13	glibc: static setuid binary dlopen may incorrectly search LD_LIBRARY_PATH 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4802 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-05-16 20:15 修改: 2026-06-17 09:34
libc-bin	CVE-2025-8058	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Double free in glibc 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-8058 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-07-23 20:15 修改: 2026-06-17 10:06
libc-bin	CVE-2026-0915	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Information disclosure via zero-valued network query 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0915 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-15 22:16 修改: 2026-06-17 10:11
libc-bin	CVE-2026-19542	中危	2.31-13+deb11u3		glibc: Fix out-of-bounds array write in tdelete 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19542 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libssl1.1	CVE-2022-2097	中危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u4	openssl: AES OCB fails to encrypt some bytes 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2097 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-07-05 11:15 修改: 2026-06-17 04:41
libssl1.1	CVE-2022-4304	中危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u4	openssl: timing attack in RSA Decryption implementation 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4304 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-02-08 20:15 修改: 2026-06-17 05:20
libssl1.1	CVE-2023-0465	中危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u5	openssl: Invalid certificate policies in leaf certificates are silently ignored 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0465 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-0466	中危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u5	openssl: Certificate policy check not enabled 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-0466 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-03-28 15:15 修改: 2026-06-17 05:25
libssl1.1	CVE-2023-2650	中危	1.1.1n-0+deb11u1	1.1.1n-0+deb11u5	openssl: Possible DoS translating ASN.1 object identifiers 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-2650 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-05-30 14:15 修改: 2026-06-17 05:53
libssl1.1	CVE-2023-3446	中危	1.1.1n-0+deb11u1	1.1.1v-0~deb11u1	openssl: Excessive time spent checking DH keys and parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3446 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-07-19 12:15 修改: 2026-06-17 06:14
libssl1.1	CVE-2023-3817	中危	1.1.1n-0+deb11u1	1.1.1v-0~deb11u1	OpenSSL: Excessive time spent checking DH q parameter value 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-3817 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-07-31 16:15 修改: 2026-06-17 06:14
libssl1.1	CVE-2023-5678	中危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u2	openssl: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5678 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-11-06 16:15 修改: 2026-06-17 06:49
libssl1.1	CVE-2024-0727	中危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u2	openssl: denial of service via null dereference 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-0727 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-01-26 09:15 修改: 2026-06-17 06:54
libssl1.1	CVE-2025-69419	中危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u5	openssl: OpenSSL: Arbitrary code execution due to out-of-bounds write in PKCS#12 processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69419 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl1.1	CVE-2025-9230	中危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u4	openssl: Out-of-bounds read & write in RFC 3211 KEK Unwrap 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9230 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-09-30 14:15 修改: 2026-07-14 13:18
libssl1.1	CVE-2026-63072	中危	1.1.1n-0+deb11u1		openssl: heap buffer overflow in CMS key unwrapping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63072 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl1.1	CVE-2026-63076	中危	1.1.1n-0+deb11u1		openssl: invalid pointer dereference in CMP server via crafted protectionAlg 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63076 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libgnutls30	CVE-2021-4209	中危	3.7.1-5	3.7.1-5+deb11u1	GnuTLS: Null pointer dereference in MD_UPDATE 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-4209 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-08-24 16:15 修改: 2026-06-17 04:19
libgnutls30	CVE-2023-5981	中危	3.7.1-5	3.7.1-5+deb11u4	gnutls: timing side-channel in the RSA-PSK authentication 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-5981 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-11-28 12:15 修改: 2026-06-17 06:49
libsystemd0	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00
libsystemd0	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20
libsystemd0	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51
libsystemd0	CVE-2025-4598	中危	247.3-7	247.3-7+deb11u7	systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16
libsystemd0	CVE-2026-15059	中危	247.3-7		Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libsystemd0	CVE-2026-16742	中危	247.3-7		systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libsystemd0	CVE-2026-29111	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
libsystemd0	CVE-2026-40225	中危	247.3-7	247.3-7+deb11u8	systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libsystemd0	CVE-2026-40226	中危	247.3-7	247.3-7+deb11u8	systemd: systemd nspawn: Escape-to-host action via crafted config file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libsystemd0	CVE-2026-4105	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-03-13 19:55 修改: 2026-08-21 13:18
libgnutls30	CVE-2024-12243	中危	3.7.1-5	3.7.1-5+deb11u7	gnutls: GnuTLS Impacted by Inefficient DER Decoding in libtasn1 Leading to Remote DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12243 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-02-10 16:15 修改: 2026-06-17 06:59
libtasn1-6	CVE-2024-12133	中危	4.16.0-2	4.16.0-2+deb11u2	libtasn1: Inefficient DER Decoding in libtasn1 Leading to Potential Remote DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-12133 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-02-10 16:15 修改: 2026-06-30 03:16
libgnutls30	CVE-2024-28834	中危	3.7.1-5	3.7.1-5+deb11u6	gnutls: vulnerable to Minerva side-channel information leak 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28834 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-03-21 14:15 修改: 2026-06-17 07:21
libgnutls30	CVE-2024-28835	中危	3.7.1-5	3.7.1-5+deb11u6	gnutls: potential crash during chain building/verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28835 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-03-21 06:15 修改: 2026-07-03 03:16
libgnutls30	CVE-2025-14831	中危	3.7.1-5	3.7.1-5+deb11u9	gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14831 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-02-09 15:16 修改: 2026-08-21 14:16
libgnutls30	CVE-2025-6395	中危	3.7.1-5	3.7.1-5+deb11u8	gnutls: NULL pointer dereference in _gnutls_figure_common_ciphersuite() 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6395 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-07-10 16:15 修改: 2026-08-21 13:16
libudev1	CVE-2022-3821	中危	247.3-7	247.3-7+deb11u2	systemd: buffer overrun in format_timespan() function 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3821 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-11-08 22:15 修改: 2026-06-17 05:00
libudev1	CVE-2022-4415	中危	247.3-7	247.3-7+deb11u2	systemd: local information leak due to systemd-coredump not respecting fs.suid_dumpable kernel setting 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-4415 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-01-11 15:15 修改: 2026-06-17 05:20
libudev1	CVE-2023-7008	中危	247.3-7	247.3-7+deb11u6	systemd-resolved: Unsigned name response in signed zone is not refused when DNSSEC=yes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-7008 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-12-23 13:15 修改: 2026-06-17 06:51
libudev1	CVE-2025-4598	中危	247.3-7	247.3-7+deb11u7	systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4598 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-05-30 14:15 修改: 2026-08-21 13:16
libudev1	CVE-2026-15059	中危	247.3-7		Local unprivileged users can terminate arbitrary local processes via a ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15059 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 14:17 修改: 2026-08-10 18:17
libudev1	CVE-2026-16742	中危	247.3-7		systemd-homed contains a local privilege escalation bug via arbitrary ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-16742 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 14:17 修改: 2026-08-10 16:19
libudev1	CVE-2026-29111	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Arbitrary code execution or Denial of Service via spurious IPC API call data 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-29111 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-03-23 22:16 修改: 2026-06-17 10:29
libudev1	CVE-2026-40225	中危	247.3-7	247.3-7+deb11u8	systemd: udev in systemd: Privilege escalation via malicious hardware devices and unsanitized kernel output 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40225 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1	CVE-2026-40226	中危	247.3-7	247.3-7+deb11u8	systemd: systemd nspawn: Escape-to-host action via crafted config file 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40226 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libudev1	CVE-2026-4105	中危	247.3-7	247.3-7+deb11u8	systemd: systemd: Privilege escalation via improper access control in RegisterMachine D-Bus method 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4105 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-03-13 19:55 修改: 2026-08-21 13:18
libgnutls30	CVE-2026-42011	中危	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Security bypass due to incorrect name constraint handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42011 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-07 15:16 修改: 2026-08-25 11:16
login	CVE-2023-4641	中危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38
passwd	CVE-2023-4641	中危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow-utils: possible password leak during passwd(1) change 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4641 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-12-27 16:15 修改: 2026-06-17 06:38
libgnutls30	CVE-2026-42012	中危	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42012 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18
libgnutls30	CVE-2026-42013	中危	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Certificate validation bypass due to oversized Subject Alternative Name 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42013 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 22:16 修改: 2026-08-25 11:16
libgnutls30	CVE-2026-42014	中危	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Use-after-free in gnutls_pkcs11_token_set_pin 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42014 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-16 02:16 修改: 2026-08-25 10:18
libgnutls30	CVE-2026-42015	中危	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Memory corruption due to off-by-one error in PKCS#12 bag handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42015 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 22:16 修改: 2026-08-25 10:18
libgnutls30	CVE-2026-5260	中危	3.7.1-5	3.7.1-5+deb11u10	gnutls: gnutls: Information disclosure via heap overread in RSA key exchange 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5260 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-26 22:16 修改: 2026-08-25 11:16
libc-bin	CVE-2026-4046	中危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: glibc: Denial of Service via iconv() function with specific character sets 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-4046 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-03-30 18:16 修改: 2026-07-14 13:18
libc-bin	CVE-2026-5435	中危	2.31-13+deb11u3		glibc: glibc: Out-of-bounds write via TSIG record processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5435 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 13:19 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5450	中危	2.31-13+deb11u3		glibc: glibc: Heap Buffer Overflow in `scanf` with `%mc` format specifier and large width 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5450 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-5928	中危	2.31-13+deb11u3		glibc: glibc: Information disclosure or denial of service via ungetwc function with specific wide character encodings 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5928 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-20 21:16 修改: 2026-07-14 13:19
libc-bin	CVE-2026-6238	中危	2.31-13+deb11u3		glibc: glibc: Application crash or uninitialized memory read via crafted DNS response 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6238 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-28 19:37 修改: 2026-07-14 13:19
libgssapi-krb5-2	CVE-2023-36054	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u4	krb5: Denial of service through freeing uninitialized pointer 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-36054 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-08-07 19:15 修改: 2026-06-17 06:05
perl-base	CVE-2025-15649	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: Denial of Service via malformed DOS date in zip header 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15649 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2025-40909	中危	5.32.1-4+deb11u2	5.32.1-4+deb11u5	perl: Perl threads have a working directory race condition where file operations may target unintended paths 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-40909 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-05-30 13:15 修改: 2026-06-17 09:22
perl-base	CVE-2026-12087	中危	5.32.1-4+deb11u2		perl-Socket: perl-Socket: Information Disclosure due to Out-of-Bounds Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-12087 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-15 22:16 修改: 2026-06-17 10:14
perl-base	CVE-2026-48959	中危	5.32.1-4+deb11u2		perl-IO-Compress: perl-IO-Compress: CPU exhaustion via per-byte read loop in fastForward 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48959 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-48961	中危	5.32.1-4+deb11u2		perl-IO-Compress: IO::Compress: Denial of Service in zipdetails CLI tool via malformed Info-ZIP Unix Extra Field 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-48961 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-27 04:16 修改: 2026-07-24 12:10
perl-base	CVE-2026-7010	中危	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.093 for Perl do not validate CRLF in HTTP ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7010 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-05-11 22:22 修改: 2026-06-17 11:01
sed	CVE-2026-5958	中危	4.7-1		sed: GNU sed TOCTOU race condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5958 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-20 12:16 修改: 2026-06-17 10:59
tar	CVE-2026-18477	中危	1.34+dfsg-1		tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18477 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-03 17:16 修改: 2026-08-21 13:16
tar	CVE-2026-18508	中危	1.34+dfsg-1		tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-18508 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-03 16:16 修改: 2026-08-21 13:16
tar	CVE-2026-5704	中危	1.34+dfsg-1		tar: tar: Hidden file injection via crafted archives 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-5704 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-06 16:16 修改: 2026-06-17 10:59
libgssapi-krb5-2	CVE-2025-24528	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u6	krb5: overflow when calculating ulog block size 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-24528 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-16 18:16 修改: 2026-06-17 08:59
libgssapi-krb5-2	CVE-2025-3576	中危	1.18.3-6+deb11u1	1.18.3-6+deb11u7	krb5: Kerberos RC4-HMAC-MD5 Checksum Vulnerability Enabling Message Spoofing via MD5 Collisions 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-3576 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-04-15 06:15 修改: 2026-08-21 13:16
libc-bin	CVE-2026-6368	中危	2.31-13+deb11u3		glibc: glibc: Process abort due to invalid memory in wordexp 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-6368 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-10 19:17 修改: 2026-08-12 18:18
zlib1g	CVE-2026-27171	中危	1:1.2.11.dfsg-2		zlib: zlib: Denial of Service via infinite loop in CRC32 combine functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27171 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-02-18 04:16 修改: 2026-06-17 10:26
libk5crypto3	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libk5crypto3	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libk5crypto3	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16
libgcrypt20	CVE-2024-2236	低危	1.8.7-6		libgcrypt: vulnerable to Marvin Attack 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2236 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-03-06 22:15 修改: 2026-06-17 07:24
libc-bin	CVE-2019-9192	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
libc-bin	CVE-2024-33601	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin	CVE-2024-33602	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libc-bin	CVE-2025-15281	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
libc-bin	CVE-2026-0861	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Integer overflow in memalign leads to heap corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
bsdutils	CVE-2024-28085	低危	1:2.36.1-8+deb11u1	2.36.1-8+deb11u2	util-linux: CVE-2024-28085: wall: escape sequence injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-28085 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-03-27 19:15 修改: 2026-06-17 07:20
bsdutils	CVE-2025-14104	低危	1:2.36.1-8+deb11u1		util-linux: util-linux: Heap buffer overread in setpwnam() when processing 256-byte usernames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-14104 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-12-05 17:16 修改: 2026-08-21 13:16
libkrb5-3	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5-3	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5-3	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libssl1.1	CVE-2024-13176	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u3	openssl: Timing side-channel in ECDSA signature computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-13176 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-01-20 14:15 修改: 2026-06-17 07:01
libssl1.1	CVE-2024-2511	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u2	openssl: Unbounded memory growth with session handling in TLSv1.3 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-2511 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-04-08 14:15 修改: 2026-06-17 07:24
libssl1.1	CVE-2024-4741	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u2	openssl: Use After Free with SSL_free_buffers 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-4741 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-11-13 11:15 修改: 2026-06-17 08:02
libssl1.1	CVE-2024-5535	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u2	openssl: SSL_select_next_proto buffer overread 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-5535 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-06-27 11:15 修改: 2026-06-17 08:16
libssl1.1	CVE-2024-9143	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u2	openssl: Low-level invalid GF(2^m) parameters lead to OOB memory access 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-9143 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-10-16 17:15 修改: 2026-06-17 08:24
libssl1.1	CVE-2025-27587	低危	1.1.1n-0+deb11u1		OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture is vulnerable ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-27587 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-06-16 22:15 修改: 2026-06-17 09:03
libssl1.1	CVE-2025-68160	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service due to out-of-bounds write in BIO filter 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68160 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-27 16:16 修改: 2026-06-17 09:58
libssl1.1	CVE-2025-69418	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u5	openssl: OpenSSL: Information disclosure and data tampering via specific low-level OCB encryption/decryption calls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69418 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl1.1	CVE-2025-69420	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via malformed TimeStamp Response 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-69420 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:00
libssl1.1	CVE-2026-22795	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service due to type confusion in PKCS#12 file processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22795 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl1.1	CVE-2026-22796	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u5	openssl: OpenSSL: Denial of Service via type confusion in PKCS#7 signature verification 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-22796 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-27 16:16 修改: 2026-06-17 10:20
libssl1.1	CVE-2026-34180	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u8	openssl: OpenSSL: Heap buffer over-read in ASN.1 decoding can lead to denial of service or information disclosure. 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-34180 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl1.1	CVE-2026-42766	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u8	openssl: Possible NULL Dereference in Password-Based CMS Decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42766 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl1.1	CVE-2026-54874	低危	1.1.1n-0+deb11u1		openssl: excessive memory use buffering DTLS records for a future epoch 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-54874 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl1.1	CVE-2026-63074	低危	1.1.1n-0+deb11u1		openssl: CMP indefinite cache growth of ExtraCerts 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-63074 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-25 13:19 修改: 2026-08-25 15:16
libssl1.1	CVE-2026-7383	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u8	openssl: OpenSSL: Heap buffer overflow due to signed integer overflow in Unicode output sizing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7383 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libssl1.1	CVE-2026-75803	低危	1.1.1n-0+deb11u1		Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-75803 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-25 13:19 修改: 2026-08-25 13:19
libssl1.1	CVE-2026-9076	低危	1.1.1n-0+deb11u1	1.1.1w-0+deb11u8	openssl: OpenSSL: Denial of Service due to heap out-of-bounds read in CMS password-based decryption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-9076 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-09 17:17 修改: 2026-07-23 08:10
libstdc++6	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
libkrb5-3	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16
coreutils	CVE-2016-2781	低危	8.32-4+b1		coreutils: Non-privileged session can escape to the parent session in chroot 漏洞详情: https://avd.aquasec.com/nvd/cve-2016-2781 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2017-02-07 15:59 修改: 2026-06-17 00:44
gpgv	CVE-2022-3219	低危	2.2.27-2+deb11u1		gnupg: denial of service issue (resource consumption) using compressed packets 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-3219 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-02-23 20:15 修改: 2026-06-17 04:59
coreutils	CVE-2017-18018	低危	8.32-4+b1		coreutils: race condition vulnerability in chown and chgrp 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-18018 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2018-01-04 04:29 修改: 2026-06-17 01:12
coreutils	CVE-2025-5278	低危	8.32-4+b1		coreutils: Heap Buffer Under-Read in GNU Coreutils sort via Key Specification 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-5278 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-05-27 21:15 修改: 2026-08-25 10:18
coreutils	CVE-2026-56391	低危	8.32-4+b1		coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56391 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
iptables	CVE-2012-2663	低危	1.8.7-1		iptables: --syn flag bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13
coreutils	CVE-2026-56392	低危	8.32-4+b1		coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56392 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-07-24 09:16 修改: 2026-07-30 16:28
diffutils	CVE-2026-53910	低危	1:3.7-5		diffutils: heap‑based buffer overflow due to multiple signed integer overflows in line‑mapping calculations 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-53910 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-07-22 14:17 修改: 2026-07-27 12:16
libkrb5support0	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libkrb5support0	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libkrb5support0	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libsystemd0	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libsystemd0	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-05-10 16:15 修改: 2026-06-17 02:53
libsystemd0	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libsystemd0	CVE-2026-40228	低危	247.3-7		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libkrb5support0	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16
libapt-pkg6.0	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
libtasn1-6	CVE-2025-13151	低危	4.16.0-2		libtasn1: libtasn1: Denial of Service via stack-based buffer overflow in asn1_expend_octet_string 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-13151 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-07 22:15 修改: 2026-06-17 08:33
apt	CVE-2011-3374	低危	2.2.4		It was found that apt-key in apt, all versions, do not correctly valid ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3374 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-11-26 00:15 修改: 2024-11-21 01:30
dpkg	CVE-2025-6297	低危	1.20.9	1.20.14	It was discovered that dpkg-deb does not properly sanitize directory p ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-6297 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2025-07-01 17:15 修改: 2026-07-08 09:16
gcc-10-base	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
gcc-9-base	CVE-2023-4039	低危	9.3.0-22		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
bsdutils	CVE-2022-0563	低危	1:2.36.1-8+deb11u1		util-linux: partial disclosure of arbitrary files in chfn and chsh when compiled with libreadline 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-0563 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2022-02-21 19:15 修改: 2026-06-17 04:20
libc-bin	CVE-2010-4756	低危	2.31-13+deb11u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc-bin	CVE-2018-20796	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc-bin	CVE-2019-1010022	低危	2.31-13+deb11u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libgnutls30	CVE-2011-3389	低危	3.7.1-5		HTTPS: block-wise chosen-plaintext attack against SSL/TLS (BEAST) 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-3389 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2011-09-06 19:55 修改: 2026-04-29 01:13
libgnutls30	CVE-2025-9820	低危	3.7.1-5	3.7.1-5+deb11u9	gnutls: Stack-based Buffer Overflow in gnutls_pkcs11_token_init() Function 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-9820 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-26 20:16 修改: 2026-08-21 18:16
libc6	CVE-2010-4756	低危	2.31-13+deb11u3		glibc: glob implementation can cause excessive CPU and memory consumption due to crafted glob expressions 漏洞详情: https://avd.aquasec.com/nvd/cve-2010-4756 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2011-03-02 20:00 修改: 2026-04-29 01:13
libc6	CVE-2018-20796	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-20796 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-02-26 02:29 修改: 2026-06-17 01:53
libc6	CVE-2019-1010022	低危	2.31-13+deb11u3		glibc: stack guard protection bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010022 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010023	低危	2.31-13+deb11u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libudev1	CVE-2013-4392	低危	247.3-7		systemd: TOCTOU race condition when updating file permissions and SELinux security contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4392 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2013-10-28 22:55 修改: 2026-04-29 01:13
libudev1	CVE-2020-13529	低危	247.3-7		systemd: DHCP FORCERENEW authentication not implemented can cause a system running the DHCP client to have its network reconfigured 漏洞详情: https://avd.aquasec.com/nvd/cve-2020-13529 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-05-10 16:15 修改: 2026-06-17 02:53
libudev1	CVE-2023-31437	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify a seale ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31437 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31438	低危	247.3-7		An issue was discovered in systemd 253. An attacker can truncate a sea ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31438 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2023-31439	低危	247.3-7		An issue was discovered in systemd 253. An attacker can modify the con ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31439 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-06-13 17:15 修改: 2026-06-17 05:56
libudev1	CVE-2026-40228	低危	247.3-7		systemd: systemd-journald: Unintended output to user terminals via logger command 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-40228 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-04-10 16:16 修改: 2026-06-17 10:44
libxtables12	CVE-2012-2663	低危	1.8.7-1		iptables: --syn flag bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13
libc6	CVE-2019-1010024	低危	2.31-13+deb11u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libc6	CVE-2019-1010025	低危	2.31-13+deb11u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
login	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
login	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-12-03 15:15 修改: 2024-11-21 01:55
login	CVE-2023-29383	低危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
login	CVE-2024-56433	低危	1:4.8.1-1		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
login	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2019-9192	低危	2.31-13+deb11u3		glibc: uncontrolled recursion in function check_dst_limits_calc_pos_1 in posix/regexec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-9192 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-02-26 18:29 修改: 2026-06-17 02:43
passwd	CVE-2007-5686	低危	1:4.8.1-1		initscripts in rPath Linux 1 sets insecure permissions for the /var/lo ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2007-5686 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2007-10-28 17:08 修改: 2026-04-23 00:35
passwd	CVE-2013-4235	低危	1:4.8.1-1		shadow-utils: TOCTOU race conditions by copying and removing directory trees 漏洞详情: https://avd.aquasec.com/nvd/cve-2013-4235 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-12-03 15:15 修改: 2024-11-21 01:55
passwd	CVE-2023-29383	低危	1:4.8.1-1	1:4.8.1-1+deb11u1	shadow: Improper input validation in shadow-utils package utility chfn 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29383 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-04-14 22:15 修改: 2026-06-17 05:49
passwd	CVE-2024-56433	低危	1:4.8.1-1		shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-56433 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-12-26 09:15 修改: 2026-06-17 08:12
passwd	TEMP-0628843-DBAD28	低危	1:4.8.1-1		[more related to CVE-2005-4890] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0628843-DBAD28 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2024-33601	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache may terminate daemon on memory allocation failure 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33601 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
libgssapi-krb5-2	CVE-2018-5709	低危	1.18.3-6+deb11u1		krb5: integer overflow in dbentry->n_key_data in kadmin/dbutil/dump.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-5709 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2018-01-16 09:29 修改: 2026-06-17 02:00
libgssapi-krb5-2	CVE-2024-26458	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/rpc/pmap_rmt.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26458 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libgssapi-krb5-2	CVE-2024-26461	低危	1.18.3-6+deb11u1		krb5: Memory leak at /krb5/src/lib/gssapi/krb5/k5sealv3.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-26461 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-02-29 01:44 修改: 2026-06-17 07:17
libpcre2-8-0	CVE-2022-41409	低危	10.36-2		pcre2: negative repeat value in a pcre2test subject line leads to inifinite loop 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41409 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-07-18 14:15 修改: 2026-06-17 05:03
libpcre3	CVE-2017-11164	低危	2:8.39-13		pcre: OP_KETRMAX feature in the match function in pcre_exec.c 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-11164 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2017-07-11 03:29 修改: 2026-06-17 01:01
libpcre3	CVE-2017-16231	低危	2:8.39-13		pcre: self-recursive call in match() in pcre_exec.c leads to denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-16231 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-03-21 15:59 修改: 2026-06-17 01:09
libpcre3	CVE-2017-7245	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7245 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2017-03-23 21:59 修改: 2026-06-17 01:23
libpcre3	CVE-2017-7246	低危	2:8.39-13		pcre: stack-based buffer overflow write in pcre32_copy_substring 漏洞详情: https://avd.aquasec.com/nvd/cve-2017-7246 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2017-03-23 21:59 修改: 2026-06-17 01:23
libpcre3	CVE-2019-20838	低危	2:8.39-13		pcre: Buffer over-read in JIT when UTF is disabled and \X or \R has fixed quantifier greater than 1 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-20838 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2020-06-15 17:15 修改: 2026-06-17 02:31
libsepol1	CVE-2021-36084	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36084 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libsepol1	CVE-2021-36085	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in __cil_verify_classperms() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36085 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libsepol1	CVE-2021-36086	低危	3.1-1	3.1-1+deb11u1	libsepol: use-after-free in cil_reset_classpermission() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36086 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libsepol1	CVE-2021-36087	低危	3.1-1	3.1-1+deb11u1	libsepol: heap-based buffer overflow in ebitmap_match_any() 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-36087 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2021-07-01 03:15 修改: 2026-06-17 03:58
libgssapi-krb5-2	CVE-2026-11850	低危	1.18.3-6+deb11u1		krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds read 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-11850 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-06-11 10:16 修改: 2026-08-21 13:16
libip4tc2	CVE-2012-2663	低危	1.8.7-1		iptables: --syn flag bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13
libip6tc2	CVE-2012-2663	低危	1.8.7-1		iptables: --syn flag bypass 漏洞详情: https://avd.aquasec.com/nvd/cve-2012-2663 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2014-02-15 14:57 修改: 2026-04-29 01:13
perl-base	CVE-2011-4116	低危	5.32.1-4+deb11u2		perl: File:: Temp insecure temporary file handling 漏洞详情: https://avd.aquasec.com/nvd/cve-2011-4116 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2020-01-31 18:15 修改: 2025-08-04 19:04
perl-base	CVE-2023-31486	低危	5.32.1-4+deb11u2		http-tiny: perl: insecure TLS cert default 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-31486 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-04-29 00:15 修改: 2026-06-17 05:57
libc6	CVE-2024-33602	低危	2.31-13+deb11u3	2.31-13+deb11u10	glibc: netgroup cache assumes NSS callback uses in-buffer strings 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-33602 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-05-06 20:15 修改: 2026-06-17 07:32
sysvinit-utils	TEMP-0517018-A83CE6	低危	2.96-7+deb11u1		[sysvinit: no-root option in expert installer exposes locally exploitable security flaw] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0517018-A83CE6 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc6	CVE-2025-15281	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-15281 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-20 14:16 修改: 2026-06-17 08:37
libc6	CVE-2026-0861	低危	2.31-13+deb11u3	2.31-13+deb11u14	glibc: Integer overflow in memalign leads to heap corruption 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-0861 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-01-14 21:15 修改: 2026-06-17 10:11
libc-bin	CVE-2019-1010023	低危	2.31-13+deb11u3		glibc: running ldd on malicious ELF leads to code execution because of wrong size computation 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010023 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
tar	CVE-2005-2541	低危	1.34+dfsg-1		tar: does not properly warn the user when extracting setuid or setgid files 漏洞详情: https://avd.aquasec.com/nvd/cve-2005-2541 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2005-08-10 04:00 修改: 2026-04-16 00:27
tar	CVE-2022-48303	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: heap buffer overflow at from_header() in list.c via specially crafted checksum 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-48303 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-01-30 04:15 修改: 2026-06-17 05:14
tar	CVE-2023-39804	低危	1.34+dfsg-1	1.34+dfsg-1+deb11u1	tar: Incorrectly handled extension attributes in PAX archives can lead to a crash 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39804 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2024-03-27 04:15 修改: 2026-06-17 06:12
tar	TEMP-0290435-0B57B5	低危	1.34+dfsg-1		[tar's rmt command may have undesired side effects] 漏洞详情: https://security-tracker.debian.org/tracker/TEMP-0290435-0B57B5 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 0001-01-01 00:00 修改: 0001-01-01 00:00
libc-bin	CVE-2019-1010024	低危	2.31-13+deb11u3		glibc: ASLR bypass using cache of thread stack and heap 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010024 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libgcc-s1	CVE-2023-4039	低危	10.2.1-6		gcc: -fstack-protector fails to guard dynamic stack allocations on ARM64 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-4039 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2023-09-13 09:15 修改: 2026-06-23 18:17
libc-bin	CVE-2019-1010025	低危	2.31-13+deb11u3		glibc: information disclosure of heap addresses of pthread_created thread 漏洞详情: https://avd.aquasec.com/nvd/cve-2019-1010025 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2019-07-15 04:15 修改: 2026-06-17 02:09
libgcrypt20	CVE-2018-6829	低危	1.8.7-6		libgcrypt: ElGamal implementation doesn't have semantic security due to incorrectly encoded plaintexts possibly allowing to obtain sensitive information 漏洞详情: https://avd.aquasec.com/nvd/cve-2018-6829 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2018-02-07 23:29 修改: 2026-06-17 02:02
perl-base	CVE-2026-19487	未知	5.32.1-4+deb11u2		Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expre ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-19487 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-13 16:17 修改: 2026-08-13 21:17
perl-base	CVE-2026-7017	未知	5.32.1-4+deb11u2		HTTP::Tiny versions before 0.095 for Perl forward credential headers t ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-7017 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-07-07 19:16 修改: 2026-07-08 15:56
perl-base	CVE-2026-15534	未知	5.32.1-4+deb11u2		Perl versions through 5.45.1 have out-of-bounds heap reads and writes ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-15534 镜像层: sha256:18c2069f7a9897b09047aa2ed5cae1ef0476729180af5053560a8d18e2b31dac 发布日期: 2026-08-09 18:16 修改: 2026-08-12 18:17

go-runner (gobinary)

低危漏洞:4

中危漏洞:52

高危漏洞:57

严重漏洞:5

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2022-23806	严重	v1.17.3	1.16.14, 1.17.7	golang: crypto/elliptic: IsOnCurve returns true for invalid field elements 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23806 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-02-11 01:15 修改: 2026-06-17 04:30
stdlib	CVE-2023-24538	严重	v1.17.3	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24540	严重	v1.17.3	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2024-24790	严重	v1.17.3	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-06-05 16:15 修改: 2026-06-17 07:14
stdlib	CVE-2025-68121	严重	v1.17.3	1.24.13, 1.25.7, 1.26.0-rc.3	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58
stdlib	CVE-2021-44716	高危	v1.17.3	1.16.12, 1.17.5	golang: net/http: limit growth of header canonicalization cache 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44716 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-01-01 05:15 修改: 2026-06-17 04:12
stdlib	CVE-2022-23772	高危	v1.17.3	1.16.14, 1.17.7	golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-23772 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-02-11 01:15 修改: 2026-06-17 04:30
stdlib	CVE-2022-24675	高危	v1.17.3	1.17.9, 1.18.1	golang: encoding/pem: fix stack overflow in Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24675 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-04-20 10:15 修改: 2026-06-17 04:32
stdlib	CVE-2022-24921	高危	v1.17.3	1.16.15, 1.17.8	golang: regexp: stack exhaustion via a deeply nested expression 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-24921 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-03-05 20:15 修改: 2026-06-17 04:32
stdlib	CVE-2022-27664	高危	v1.17.3	1.18.6, 1.19.1	golang: net/http: handle server errors after sending GOAWAY 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-27664 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-09-06 18:15 修改: 2026-06-17 04:37
stdlib	CVE-2022-28131	高危	v1.17.3	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Decoder.Skip 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28131 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:38
stdlib	CVE-2022-28327	高危	v1.17.3	1.17.9, 1.18.1	golang: crypto/elliptic: panic caused by oversized scalar 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-28327 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-04-20 10:15 修改: 2026-06-17 04:38
stdlib	CVE-2022-2879	高危	v1.17.3	1.18.7, 1.19.2	golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2879 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-10-14 15:15 修改: 2026-06-17 04:42
stdlib	CVE-2022-2880	高危	v1.17.3	1.18.7, 1.19.2	golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-2880 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-10-14 15:15 修改: 2026-06-17 04:42
stdlib	CVE-2022-29804	高危	v1.17.3	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29804 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:40
stdlib	CVE-2022-30580	高危	v1.17.3	1.17.11, 1.18.3	golang: os/exec: Code injection in Cmd.Start 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30580 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30630	高危	v1.17.3	1.17.12, 1.18.4	golang: io/fs: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30630 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30631	高危	v1.17.3	1.17.12, 1.18.4	golang: compress/gzip: stack exhaustion in Reader.Read 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30631 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30632	高危	v1.17.3	1.17.12, 1.18.4	golang: path/filepath: stack exhaustion in Glob 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30632 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30633	高危	v1.17.3	1.17.12, 1.18.4	golang: encoding/xml: stack exhaustion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30633 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30634	高危	v1.17.3	1.17.11, 1.18.3	ELSA-2022-17957: ol8addon security update (IMPORTANT) 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30634 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-07-15 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-30635	高危	v1.17.3	1.17.12, 1.18.4	golang: encoding/gob: stack exhaustion in Decoder.Decode 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30635 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2022-32189	高危	v1.17.3	1.17.13, 1.18.5	golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32189 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:46
stdlib	CVE-2022-41715	高危	v1.17.3	1.18.7, 1.19.2	golang: regexp/syntax: limit memory used by parsing regexps 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41715 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-10-14 15:16 修改: 2026-06-17 05:03
stdlib	CVE-2022-41716	高危	v1.17.3	1.18.8, 1.19.3	Due to unsanitized NUL values, attackers may be able to maliciously se ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41716 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-11-02 16:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41720	高危	v1.17.3	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-12-07 17:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41722	高危	v1.17.3	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41723	高危	v1.17.3	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41724	高危	v1.17.3	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41725	高危	v1.17.3	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2023-24534	高危	v1.17.3	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24536	高危	v1.17.3	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24537	高危	v1.17.3	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24539	高危	v1.17.3	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-29400	高危	v1.17.3	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-29403	高危	v1.17.3	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-06-08 21:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-39325	高危	v1.17.3	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-10-11 22:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-45283	高危	v1.17.3	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-11-09 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45287	高危	v1.17.3	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-12-05 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45288	高危	v1.17.3	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-04-04 21:15 修改: 2026-06-17 06:28
stdlib	CVE-2024-34156	高危	v1.17.3	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2025-61726	高危	v1.17.3	1.24.12, 1.25.6	golang: net/url: Memory exhaustion in query parameter parsing in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-01-28 20:16 修改: 2026-08-25 13:17
stdlib	CVE-2025-61729	高危	v1.17.3	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50
stdlib	CVE-2026-25679	高危	v1.17.3	1.25.8, 1.26.1	net/url: Incorrect parsing of IPv6 host literals in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-03-06 22:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-27145	高危	v1.17.3	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-32280	高危	v1.17.3	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-04-08 02:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-32281	高危	v1.17.3	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.17.3	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-04-08 02:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33811	高危	v1.17.3	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33814	高危	v1.17.3	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.17.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39820	高危	v1.17.3	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39821	高危	v1.17.3	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.17.3	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.17.3	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.17.3	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:19
stdlib	CVE-2026-42504	高危	v1.17.3	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-56853	高危	v1.17.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.17.3	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.17.3	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.17.3	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.17.3	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2021-44717	中危	v1.17.3	1.16.12, 1.17.5	golang: syscall: don't close fd 0 on ForkExec error 漏洞详情: https://avd.aquasec.com/nvd/cve-2021-44717 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-01-01 05:15 修改: 2026-06-17 04:12
stdlib	CVE-2022-1705	中危	v1.17.3	1.17.12, 1.18.4	golang: net/http: improper sanitization of Transfer-Encoding header 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1705 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:22
stdlib	CVE-2022-1962	中危	v1.17.3	1.17.12, 1.18.4	golang: go/parser: stack exhaustion in all Parse* functions 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-1962 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:23
stdlib	CVE-2022-29526	中危	v1.17.3	1.17.10, 1.18.2	golang: syscall: faccessat checks wrong group 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-29526 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-06-23 17:15 修改: 2026-06-17 04:40
stdlib	CVE-2022-32148	中危	v1.17.3	1.17.12, 1.18.4	golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-32148 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:46
stdlib	CVE-2022-41717	中危	v1.17.3	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-12-08 20:15 修改: 2026-06-17 05:03
stdlib	CVE-2023-24532	中危	v1.17.3	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-03-08 20:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-29406	中危	v1.17.3	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-07-11 20:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-29409	中危	v1.17.3	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-08-02 20:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-39318	中危	v1.17.3	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-09-08 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-39319	中危	v1.17.3	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-09-08 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-39326	中危	v1.17.3	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-12-06 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-45284	中危	v1.17.3	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2023-11-09 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45289	中危	v1.17.3	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-03-05 23:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45290	中危	v1.17.3	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-03-05 23:15 修改: 2026-06-17 06:28
stdlib	CVE-2024-24783	中危	v1.17.3	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24784	中危	v1.17.3	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24785	中危	v1.17.3	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24789	中危	v1.17.3	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-06-05 16:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24791	中危	v1.17.3	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-07-02 22:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-34155	中危	v1.17.3	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2024-34158	中危	v1.17.3	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2024-45336	中危	v1.17.3	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-01-28 02:15 修改: 2026-06-17 07:54
stdlib	CVE-2025-0913	中危	v1.17.3	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27
stdlib	CVE-2025-22866	中危	v1.17.3	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-02-06 17:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22870	中危	v1.17.3	1.23.7, 1.24.1	golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22871	中危	v1.17.3	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22873	中危	v1.17.3	1.23.9, 1.24.3	os: os: Information disclosure via path traversal using specially crafted filenames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-4673	中危	v1.17.3	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33
stdlib	CVE-2025-47906	中危	v1.17.3	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28
stdlib	CVE-2025-47907	中危	v1.17.3	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28
stdlib	CVE-2025-47912	中危	v1.17.3	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28
stdlib	CVE-2025-58183	中危	v1.17.3	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58185	中危	v1.17.3	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58187	中危	v1.17.3	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58188	中危	v1.17.3	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58189	中危	v1.17.3	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-61723	中危	v1.17.3	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61724	中危	v1.17.3	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61725	中危	v1.17.3	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61727	中危	v1.17.3	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61728	中危	v1.17.3	1.24.12, 1.25.6	golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61730	中危	v1.17.3	1.24.12, 1.25.6	crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2026-27142	中危	v1.17.3	1.25.8, 1.26.1	html/template: URLs in meta content attribute actions are not escaped in html/template 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib	CVE-2026-32282	中危	v1.17.3	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.17.3	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.17.3	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.17.3	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.17.3	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.17.3	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.17.3	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.17.3	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2022-30629	低危	v1.17.3	1.17.11, 1.18.3	golang: crypto/tls: session tickets lack random ticket_age_add 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-30629 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2022-08-10 20:15 修改: 2026-06-17 04:43
stdlib	CVE-2024-45341	低危	v1.17.3	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-01-28 02:15 修改: 2026-06-17 07:54
stdlib	CVE-2025-58186	低危	v1.17.3	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2026-27139	低危	v1.17.3	1.25.8, 1.26.1	os: FileInfo can escape from a Root in golang os module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139 镜像层: sha256:d2df6f64dca491f0e5b4204cfc42944d2c3efdb5011951226e3cb0a153901dfc 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26

usr/local/bin/kube-proxy (gobinary)

低危漏洞:3

中危漏洞:47

高危漏洞:37

严重漏洞:4

软件包	漏洞	安全状态	安装版本	修复版本	漏洞信息
stdlib	CVE-2023-24538	严重	v1.18.8	1.19.8, 1.20.3	golang: html/template: backticks not treated as string delimiters 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24538 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24540	严重	v1.18.8	1.19.9, 1.20.4	golang: html/template: improper handling of JavaScript whitespace 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24540 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2024-24790	严重	v1.18.8	1.21.11, 1.22.4	golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24790 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-06-05 16:15 修改: 2026-06-17 07:14
stdlib	CVE-2025-68121	严重	v1.18.8	1.24.13, 1.25.7, 1.26.0-rc.3	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-68121 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-02-05 18:16 修改: 2026-06-17 09:58
stdlib	CVE-2022-41720	高危	v1.18.8	1.18.9, 1.19.4	golang: os, net/http: avoid escapes from os.DirFS and http.Dir on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41720 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2022-12-07 17:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41722	高危	v1.18.8	1.19.6, 1.20.1	golang: path/filepath: path-filepath filepath.Clean path traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41722 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41723	高危	v1.18.8	1.19.6, 1.20.1	golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41723 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41724	高危	v1.18.8	1.19.6, 1.20.1	golang: crypto/tls: large handshake records may cause panics 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41724 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2022-41725	高危	v1.18.8	1.19.6, 1.20.1	golang: net/http, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41725 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-02-28 18:15 修改: 2026-06-17 05:03
stdlib	CVE-2023-24534	高危	v1.18.8	1.19.8, 1.20.3	golang: net/http, net/textproto: denial of service from excessive memory allocation 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24534 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24536	高危	v1.18.8	1.19.8, 1.20.3	golang: net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24536 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24537	高危	v1.18.8	1.19.8, 1.20.3	golang: go/parser: Infinite loop in parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24537 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-04-06 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-24539	高危	v1.18.8	1.19.9, 1.20.4	golang: html/template: improper sanitization of CSS values 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24539 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-29400	高危	v1.18.8	1.19.9, 1.20.4	golang: html/template: improper handling of empty HTML attributes 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29400 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-05-11 16:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-29403	高危	v1.18.8	1.19.10, 1.20.5	golang: runtime: unexpected behavior of setuid/setgid binaries 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29403 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-06-08 21:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-39325	高危	v1.18.8	1.20.10, 1.21.3	golang: net/http, x/net/http2: rapid stream resets can cause excessive work (CVE-2023-44487) 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39325 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-10-11 22:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-45283	高危	v1.18.8	1.20.11, 1.21.4, 1.20.12, 1.21.5	The filepath package does not recognize paths with a \??\ prefix as sp ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45283 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-11-09 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45287	高危	v1.18.8	1.20.0	golang: crypto/tls: Timing Side Channel attack in RSA based TLS key exchanges. 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45287 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-12-05 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45288	高危	v1.18.8	1.21.9, 1.22.2	golang: net/http, x/net/http2: unlimited number of CONTINUATION frames causes DoS 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45288 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-04-04 21:15 修改: 2026-06-17 06:28
stdlib	CVE-2024-34156	高危	v1.18.8	1.22.7, 1.23.1	encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34156 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2025-61726	高危	v1.18.8	1.24.12, 1.25.6	golang: net/url: Memory exhaustion in query parameter parsing in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61726 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-01-28 20:16 修改: 2026-08-25 13:17
stdlib	CVE-2025-61729	高危	v1.18.8	1.24.11, 1.25.5	crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61729 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-12-02 19:15 修改: 2026-06-17 09:50
stdlib	CVE-2026-25679	高危	v1.18.8	1.25.8, 1.26.1	net/url: Incorrect parsing of IPv6 host literals in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-25679 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-03-06 22:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-27145	高危	v1.18.8	1.25.11, 1.26.4	crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27145 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-06-02 23:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-32280	高危	v1.18.8	1.25.9, 1.26.2	crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32280 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-04-08 02:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-32281	高危	v1.18.8	1.25.9, 1.26.2	crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32281 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32283	高危	v1.18.8	1.25.9, 1.26.2	crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32283 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-04-08 02:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33811	高危	v1.18.8	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33811 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33814	高危	v1.18.8	1.25.10, 1.26.3	net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33814 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-33818	高危	v1.18.8	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-33818 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-39820	高危	v1.18.8	1.25.10, 1.26.3	net/mail: golang: Go net/mail: Denial of Service via crafted email inputs 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39820 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39821	高危	v1.18.8	1.25.13, 1.26.6, 1.27.0-rc.3	golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39821 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-22 16:16 修改: 2026-08-25 13:18
stdlib	CVE-2026-39822	高危	v1.18.8	1.25.12, 1.26.5, 1.27.0-rc.2	golang: Go os.Root: Symlink following vulnerability allows directory traversal 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39822 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-07-08 17:17 修改: 2026-07-13 14:54
stdlib	CVE-2026-39836	高危	v1.18.8	1.25.10, 1.26.3	net: golang: Go net package: Denial of Service via NUL byte in Dial and LookupPort on Windows 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39836 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42499	高危	v1.18.8	1.25.10, 1.26.3	net/mail: golang: net/mail: Denial of Service via pathological email address parsing 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42499 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-08-25 13:19
stdlib	CVE-2026-42504	高危	v1.18.8	1.25.11, 1.26.4	mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42504 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2026-56853	高危	v1.18.8	1.25.13, 1.26.6, 1.27.0-rc.3	net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56853 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56858	高危	v1.18.8	1.25.13, 1.26.6, 1.27.0-rc.3	html/template: golang: Go html/template: Cross-Site Scripting via pathological input 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56858 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56859	高危	v1.18.8	1.25.13, 1.26.6, 1.27.0-rc.3	encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56859 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2026-56860	高危	v1.18.8	1.25.13, 1.26.6, 1.27.0-rc.3	net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56860 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-08-13 22:17 修改: 2026-08-14 17:19
stdlib	CVE-2026-56862	高危	v1.18.8	1.25.13, 1.26.6, 1.27.0-rc.3	crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-56862 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-08-13 22:17 修改: 2026-08-14 16:16
stdlib	CVE-2022-41717	中危	v1.18.8	1.18.9, 1.19.4	golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2022-41717 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2022-12-08 20:15 修改: 2026-06-17 05:03
stdlib	CVE-2023-24532	中危	v1.18.8	1.19.7, 1.20.2	golang: crypto/internal/nistec: specific unreduced P-256 scalars produce incorrect results 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-24532 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-03-08 20:15 修改: 2026-06-17 05:39
stdlib	CVE-2023-29406	中危	v1.18.8	1.19.11, 1.20.6	golang: net/http: insufficient sanitization of Host header 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29406 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-07-11 20:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-29409	中危	v1.18.8	1.19.12, 1.20.7, 1.21.0-rc.4	golang: crypto/tls: slow verification of certificate chains containing large RSA keys 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-29409 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-08-02 20:15 修改: 2026-06-17 05:49
stdlib	CVE-2023-39318	中危	v1.18.8	1.20.8, 1.21.1	golang: html/template: improper handling of HTML-like comments within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39318 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-09-08 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-39319	中危	v1.18.8	1.20.8, 1.21.1	golang: html/template: improper handling of special tags within script contexts 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39319 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-09-08 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-39326	中危	v1.18.8	1.20.12, 1.21.5	golang: net/http/internal: Denial of Service (DoS) via Resource Consumption via HTTP requests 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-39326 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-12-06 17:15 修改: 2026-06-17 06:12
stdlib	CVE-2023-45284	中危	v1.18.8	1.20.11, 1.21.4	On Windows, The IsLocal function does not correctly detect reserved de ... 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45284 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2023-11-09 17:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45289	中危	v1.18.8	1.21.8, 1.22.1	golang: net/http/cookiejar: incorrect forwarding of sensitive headers and cookies on HTTP redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45289 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-03-05 23:15 修改: 2026-06-17 06:28
stdlib	CVE-2023-45290	中危	v1.18.8	1.21.8, 1.22.1	golang: net/http: golang: mime/multipart: golang: net/textproto: memory exhaustion in Request.ParseMultipartForm 漏洞详情: https://avd.aquasec.com/nvd/cve-2023-45290 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-03-05 23:15 修改: 2026-06-17 06:28
stdlib	CVE-2024-24783	中危	v1.18.8	1.21.8, 1.22.1	golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24783 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24784	中危	v1.18.8	1.21.8, 1.22.1	golang: net/mail: comments in display names are incorrectly handled 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24784 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24785	中危	v1.18.8	1.21.8, 1.22.1	golang: html/template: errors returned from MarshalJSON methods may break template escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24785 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-03-05 23:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24789	中危	v1.18.8	1.21.11, 1.22.4	golang: archive/zip: Incorrect handling of certain ZIP files 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24789 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-06-05 16:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-24791	中危	v1.18.8	1.21.12, 1.22.5	net/http: Denial of service due to improper 100-continue handling in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-24791 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-07-02 22:15 修改: 2026-06-17 07:14
stdlib	CVE-2024-34155	中危	v1.18.8	1.22.7, 1.23.1	go/parser: golang: Calling any of the Parse functions containing deeply nested literals can cause a panic/stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34155 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2024-34158	中危	v1.18.8	1.22.7, 1.23.1	go/build/constraint: golang: Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-34158 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2024-09-06 21:15 修改: 2026-06-17 07:33
stdlib	CVE-2024-45336	中危	v1.18.8	1.22.11, 1.23.5, 1.24.0-rc.2	golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45336 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-01-28 02:15 修改: 2026-06-17 07:54
stdlib	CVE-2025-0913	中危	v1.18.8	1.23.10, 1.24.4	Inconsistent handling of O_CREATE\|O_EXCL on Unix and Windows in os in syscall 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-0913 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-06-11 18:15 修改: 2026-06-17 08:27
stdlib	CVE-2025-22866	中危	v1.18.8	1.22.12, 1.23.6, 1.24.0-rc.3	crypto/internal/nistec: golang: Timing sidechannel for P-256 on ppc64le in crypto/internal/nistec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22866 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-02-06 17:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22870	中危	v1.18.8	1.23.7, 1.24.1	golang.org/x/net/proxy: golang.org/x/net/http/httpproxy: HTTP Proxy bypass using IPv6 Zone IDs in golang.org/x/net 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22870 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-03-12 19:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22871	中危	v1.18.8	1.23.8, 1.24.2	net/http: Request smuggling due to acceptance of invalid chunked data in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22871 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-04-08 20:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-22873	中危	v1.18.8	1.23.9, 1.24.3	os: os: Information disclosure via path traversal using specially crafted filenames 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-22873 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-02-04 23:15 修改: 2026-06-17 08:50
stdlib	CVE-2025-4673	中危	v1.18.8	1.23.10, 1.24.4	net/http: Sensitive headers not cleared on cross-origin redirect in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-4673 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-06-11 17:15 修改: 2026-06-17 09:33
stdlib	CVE-2025-47906	中危	v1.18.8	1.23.12, 1.24.6	os/exec: Unexpected paths returned from LookPath in os/exec 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47906 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-09-18 19:15 修改: 2026-06-17 09:28
stdlib	CVE-2025-47907	中危	v1.18.8	1.23.12, 1.24.6	database/sql: Postgres Scan Race Condition 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47907 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-08-07 16:15 修改: 2026-06-17 09:28
stdlib	CVE-2025-47912	中危	v1.18.8	1.24.8, 1.25.2	net/url: Insufficient validation of bracketed IPv6 hostnames in net/url 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-47912 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:28
stdlib	CVE-2025-58183	中危	v1.18.8	1.24.8, 1.25.2	golang: archive/tar: Unbounded allocation when parsing GNU sparse map 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58183 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58185	中危	v1.18.8	1.24.8, 1.25.2	encoding/asn1: Parsing DER payload can cause memory exhaustion in encoding/asn1 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58185 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58187	中危	v1.18.8	1.24.9, 1.25.3	crypto/x509: Quadratic complexity when checking name constraints in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58187 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58188	中危	v1.18.8	1.24.8, 1.25.2	crypto/x509: golang: Panic when validating certificates with DSA public keys in crypto/x509 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58188 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-58189	中危	v1.18.8	1.24.8, 1.25.2	crypto/tls: go crypto/tls ALPN negotiation error contains attacker controlled information 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58189 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2025-61723	中危	v1.18.8	1.24.8, 1.25.2	encoding/pem: Quadratic complexity when parsing some invalid inputs in encoding/pem 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61723 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61724	中危	v1.18.8	1.24.8, 1.25.2	net/textproto: Excessive CPU consumption in Reader.ReadResponse in net/textproto 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61724 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61725	中危	v1.18.8	1.24.8, 1.25.2	net/mail: Excessive CPU consumption in ParseAddress in net/mail 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61725 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61727	中危	v1.18.8	1.24.11, 1.25.5	golang: crypto/x509: excluded subdomain constraint does not restrict wildcard SANs 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61727 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-12-03 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61728	中危	v1.18.8	1.24.12, 1.25.6	golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61728 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2025-61730	中危	v1.18.8	1.24.12, 1.25.6	crypto/tls: Handshake messages may be processed at the incorrect encryption level in crypto/tls 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-61730 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-01-28 20:16 修改: 2026-06-17 09:50
stdlib	CVE-2026-27142	中危	v1.18.8	1.25.8, 1.26.1	html/template: URLs in meta content attribute actions are not escaped in html/template 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27142 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26
stdlib	CVE-2026-32282	中危	v1.18.8	1.25.9, 1.26.2	golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32282 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32288	中危	v1.18.8	1.25.9, 1.26.2	archive/tar: golang: Go's archive/tar package: Denial of Service via maliciously-crafted archive 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32288 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-32289	中危	v1.18.8	1.25.9, 1.26.2	html/template: golang: html/template: Cross-Site Scripting (XSS) via improper context and brace depth tracking in JS template literals 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-32289 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-04-08 02:16 修改: 2026-07-25 10:10
stdlib	CVE-2026-39823	中危	v1.18.8	1.25.10, 1.26.3	html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39823 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39825	中危	v1.18.8	1.25.10, 1.26.3	net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39825 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-39826	中危	v1.18.8	1.25.10, 1.26.3	html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-39826 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-05-07 20:16 修改: 2026-06-17 10:42
stdlib	CVE-2026-42505	中危	v1.18.8	1.25.12, 1.26.5, 1.27.0-rc.2	crypto/tls: golang: Go crypto/tls: Information disclosure in Encrypted Client Hello 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42505 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-07-08 17:17 修改: 2026-07-13 17:05
stdlib	CVE-2026-42507	中危	v1.18.8	1.25.11, 1.26.4	net/textproto: golang: Golang net/textproto: Misleading error messages via input injection 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-42507 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-06-02 23:16 修改: 2026-07-22 19:10
stdlib	CVE-2024-45341	低危	v1.18.8	1.22.11, 1.23.5, 1.24.0-rc.2	golang: crypto/x509: crypto/x509: usage of IPv6 zone IDs can bypass URI name constraints 漏洞详情: https://avd.aquasec.com/nvd/cve-2024-45341 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-01-28 02:15 修改: 2026-06-17 07:54
stdlib	CVE-2025-58186	低危	v1.18.8	1.24.8, 1.25.2	golang.org/net/http: Lack of limit when parsing cookies can cause memory exhaustion in net/http 漏洞详情: https://avd.aquasec.com/nvd/cve-2025-58186 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2025-10-29 23:16 修改: 2026-06-17 09:44
stdlib	CVE-2026-27139	低危	v1.18.8	1.25.8, 1.26.1	os: FileInfo can escape from a Root in golang os module 漏洞详情: https://avd.aquasec.com/nvd/cve-2026-27139 镜像层: sha256:601fb01f714f836e9e4cde760b657cfbc9d3ed6a5869c5e8dc39cf9947442402 发布日期: 2026-03-06 22:16 修改: 2026-06-17 10:26