Alpine Linux

CPE Details

Alpine Linux
-
2017-07-19
17h51 +00:00
2021-06-15
14h00 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:alpinelinux:alpine_linux:-:*:*:*:*:*:*:*

Informations

Vendor

alpinelinux

Product

alpine_linux

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-22704 2022-01-06 03h23 +00:00 The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.
9.8
Critical
CVE-2019-5021 2019-05-08 14h52 +00:00 Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL password for the `root` user.
9.8
Critical
CVE-2018-1000849 2018-12-20 15h00 +00:00 Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data to an attacker-specified file, due to bugs in handling long link target name and the way a regular file is extracted.. This vulnerability appears to have been fixed in 2.6.10, 2.7.6, and 2.10.1.
8.8
High
CVE-2017-9669 2017-07-17 19h00 +00:00 A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file.
7.8
High
CVE-2017-9671 2017-07-17 19h00 +00:00 A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
7.8
High