Alpinelinux

8 CVEs across 4 Alpinelinux products. Browse Alpinelinux vulnerabilities, severities, and proof-of-concept exploits.

Alpinelinux products with known CVEs

ProductCVEs
Alpine Linux5
Abuild1
Apk-Tools1
Aports1
Alpinelinux CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2022-22704Critical9.82022-01-06The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd w…
CVE-2021-36158Medium5.92021-07-05In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificate…
CVE-2021-30139High7.52021-04-21In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.
CVE-2019-12875Medium6.52019-06-18Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance…
CVE-2019-5021Critical9.82019-05-08Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a…
CVE-2018-1000849High8.82018-12-20Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can r…
CVE-2017-9671High7.82017-07-17A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicio…
CVE-2017-9669High7.82017-07-17A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a maliciou…