Alpinelinux
Products
5- 4 CVEs
- 3 CVEs
- 1 CVE
- 1 CVE
- 1 CVE
Recent CVEs
7| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-9671 | Hig | 0.51 | 7.8 | 0.03 | Jul 17, 2017 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block. | ||
| CVE-2017-9669 | Hig | 0.51 | 7.8 | 0.03 | Jul 17, 2017 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file. | ||
| CVE-2021-29133 | 0.03 | — | 0.01 | Mar 24, 2021 | Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem. | |||
| CVE-2021-30139 | 0.00 | — | 0.02 | Apr 21, 2021 | In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash. | |||
| CVE-2019-12875 | 0.00 | — | 0.01 | Jun 18, 2019 | Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key. | |||
| CVE-2019-5021 | 0.00 | — | 0.06 | May 8, 2019 | Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of… | |||
| CVE-2018-1000849 | 0.00 | — | 0.04 | Dec 20, 2018 | Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to… |
- risk 0.51cvss 7.8epss 0.03
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
- risk 0.51cvss 7.8epss 0.03
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file.
- CVE-2021-29133Mar 24, 2021risk 0.03cvss —epss 0.01
Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem.
- CVE-2021-30139Apr 21, 2021risk 0.00cvss —epss 0.02
In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.
- CVE-2019-12875Jun 18, 2019risk 0.00cvss —epss 0.01
Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.
- CVE-2019-5021May 8, 2019risk 0.00cvss —epss 0.06
Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of…
- CVE-2018-1000849Dec 20, 2018risk 0.00cvss —epss 0.04
Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to…