Ecosystem

Alpine

10,780 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,741 results · Feed

Unscored —

CVE-2019-18408

archive_read_format_rar_read_data in archive_read_support_format_rar.c in libarchive before 3.4.0 has a use-after-free …

libarchive libarchive libarchive Debian Ubuntu Alpine

Oct 24, 2019
Medium 5.4

CVE-2019-18348

An issue was discovered in urllib2 in Python 2.x through 2.7.17 and urllib in Python 3.x through 3.8.0. CRLF injection …

python3.4 python3.5 python2.7 python3.6 Debian Ubuntu Alpine

Oct 23, 2019
Unscored —

CVE-2019-12290

GNU libidn2 before 2.2.0 fails to perform the roundtrip checks specified in RFC3490 Section 4.2 when converting A-label…

libidn2-0 libidn2 libidn2 libidn2 Debian Ubuntu Alpine

Oct 22, 2019
Unscored —

CVE-2019-18224

idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.

libidn2-0 libidn2 libidn2 libidn2 Debian Ubuntu Alpine

Oct 21, 2019
Unscored —

CVE-2019-18218

cdf_read_property_info in cdf.c in file through 5.37 does not restrict the number of CDF_VECTOR elements, which allows …

file file file Debian Ubuntu Alpine

Oct 21, 2019
Unscored —

CVE-2019-17498 Public exploit

In libssh2 v1.9.0 and earlier versions, the SSH_MSG_DISCONNECT logic in packet.c has an integer overflow in a bounds ch…

libssh2 libssh2 libssh2 libssh2 Debian Ubuntu Azure Linux Alpine

Oct 21, 2019
High 7.5

CVE-2019-18197

Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability

In xsltCopyText in transform.c in libxslt 1.1.33, a pointer variable isn't reset under certain circumstances. If the relevant memory area happened to be freed and reused in a certain way, a bounds check could fail and memory outside a buffer could be written …

nokogiri libxslt libxslt libxslt Debian Ubuntu Alpine RubyGems

Oct 18, 2019
Medium 5.9

CVE-2019-6476

An error in QNAME minimization code can cause BIND to exit with an assertion failure

A defect in code added to support QNAME minimization can cause named to exit with an assertion failure if a forwarder returns a referral rather than resolving the query. This affects BIND versions 9.14.0 up to 9.14.6, and 9.15.0 up to 9.15.4.

ISC BIND 9 bind Alpine

Oct 17, 2019
Medium 5.9

CVE-2019-6475

A flaw in mirror zone validity checking can allow zone data to be spoofed

Mirror zones are a BIND feature allowing recursive servers to pre-cache zone data provided by other servers. A mirror zone is similar to a zone of type secondary, except that its data is subject to DNSSEC validation before being used in answers, as if it had …

ISC BIND 9 bind Alpine

Oct 17, 2019
Unscored —

CVE-2019-14287 Public exploit EPSS 64%

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and s…

sudo sudo sudo Debian Ubuntu Alpine

Oct 17, 2019
High 7.5

CVE-2019-11253 Scanner template EPSS 26%

Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memo…

Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Alpine Go

Oct 17, 2019
Unscored —

CVE-2019-2999

Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are J…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2988

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2992

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2989

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2983

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2973

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2977

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are J…

Oracle Java openjdk-lts openjdk-13 Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2981

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2974

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Oct 16, 2019
Unscored —

CVE-2019-2978

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2975

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions tha…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2987

Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java S…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2958

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk11 openjdk8 Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2964

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions t…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2962

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are a…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2933

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions tha…

Oracle Java openjdk11 openjdk8 Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2945

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions th…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2938

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are…

Oracle MySQL Server percona-server-5.6 percona-xtradb-cluster-5.6 Ubuntu Alpine

Oct 16, 2019
Unscored —

CVE-2019-2949

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Unscored —

CVE-2019-2894

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that…

Oracle Java openjdk-8 openjdk-lts Debian Ubuntu Alpine Wolfi

Oct 16, 2019
Medium 6.5

CVE-2019-6472

A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

A packet containing a malformed DUID can cause the Kea DHCPv6 server process (kea-dhcp6) to exit due to an assertion failure. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.

ISC Kea kea isc-kea Debian Ubuntu Alpine

Oct 16, 2019
Medium 6.5

CVE-2019-6473

A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

An invalid hostname option can trigger an assertion failure in the Kea DHCPv4 server process (kea-dhcp4), causing the server process to exit. Versions affected: 1.4.0 to 1.5.0, 1.6.0-beta1, and 1.6.0-beta2.

ISC Kea isc-kea isc-kea Debian Ubuntu Alpine

Oct 16, 2019
Medium 5.7

CVE-2019-6474

A packet containing a malformed DUID can cause the kea-dhcp6 server to terminate

A missing check on incoming client requests can be exploited to cause a situation where the Kea server's lease storage contains leases which are rejected as invalid when the server tries to load leases from storage on restart. If the number of such leases exc…

ISC Kea kea isc-kea Debian Ubuntu Alpine

Oct 16, 2019
High 7.3

CVE-2019-14858

Ansible leaks sensitive information to logs when told not to

A vulnerability was found in Ansible engine 2.x up to 2.8 and Ansible tower 3.x up to 3.5. When a module has an argument_spec with sub parameters marked as no_log, passing an invalid parameter name to the module will cause the task to fail before the no_log o…

Red Hat Ansible ansible ansible Debian Ubuntu Alpine PyPI

Oct 14, 2019
Unscored —

CVE-2019-17539

In FFmpeg before 4.2, avcodec_open2 in libavcodec/utils.c allows a NULL pointer dereference and possibly unspecified ot…

ffmpeg ffmpeg libav ffmpeg Debian Ubuntu Alpine

Oct 14, 2019
Unscored —

CVE-2019-17540

ImageMagick before 7.0.8-54 has a heap-based buffer overflow in ReadPSInfo in coders/ps.c.

imagemagick Alpine

Oct 14, 2019
Unscored —

CVE-2019-17542

FFmpeg before 4.2 has a heap-based buffer overflow in vqa_decode_chunk because of an out-of-array access in vqa_decode_…

ffmpeg ffmpeg ffmpeg ffmpeg4 Debian Ubuntu Alpine

Oct 14, 2019
Unscored —

CVE-2019-17543 EPSS 10%

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applicat…

lz4 lz4 Debian Alpine

Oct 14, 2019
Unscored —

CVE-2019-17544

libaspell.a in GNU Aspell before 0.60.8 has a stack-based buffer over-read in acommon::unescape in common/getdata.cpp v…

aspell aspell aspell Debian Ubuntu Alpine

Oct 14, 2019