Lucene search
K

166 matches found

Cvelist
Cvelist
added 2021/07/05 10:36 p.m.12 views

CVE-2021-36158

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...

5.9AI score0.00069EPSS
Exploits0References1
CVE
CVE
added 2021/07/05 10:36 p.m.92 views

CVE-2021-36158

CVE-2021-36158 affects the xrdp package in Alpine Linux (branches up to 3.14). The vulnerability arises from pre-generated RSA certificates and private keys used in RDP sessions, enabling potential man-in-the-middle attacks. The available connected documents confirm the affected environment and t...

5.9CVSS5.6AI score0.00069EPSS
Exploits0References1Affected Software1
Debian CVE
Debian CVE
added 2021/07/05 10:36 p.m.18 views

CVE-2021-36158

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...

5.9CVSS4.3AI score0.00069EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/07/05 10:36 p.m.31 views

CVE-2021-36158

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...

5.9CVSS5.7AI score0.00069EPSS
Exploits0
CNNVD
CNNVD
added 2021/07/05 12:0 a.m.3 views

Alpine Linux 安全漏洞

Alpine Linux is a lightweight Linux distribution for security applications. A security vulnerability exists in Alpine Linux xrdp version 3.14, which stems from the program's use of pre-generated RSA certificates and private keys, making the session vulnerable to man-in-the-middle attacks...

5.9CVSS5.9AI score0.00069EPSS
Exploits0References1
OSV
OSV
added 2021/06/02 5:15 p.m.1 views

ALPINE-CVE-2021-30474

aomdsp/graintable.c in libaom in AOMedia before 2021-03-30 has a use-after-free...

9.8CVSS7AI score0.00172EPSS
Exploits0References1
OSV
OSV
added 2021/04/21 4:15 p.m.2 views

ALPINE-CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

7.5CVSS7.5AI score0.00215EPSS
Exploits0References1
OSV
OSV
added 2021/04/21 4:15 p.m.6 views

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

7.5CVSS7.4AI score
Exploits0References2
NVD
NVD
added 2021/04/21 4:15 p.m.8 views

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

7.5CVSS0.00215EPSS
Exploits0References2
Prion
Prion
added 2021/04/21 4:15 p.m.19 views

Buffer overflow

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

5CVSS7.7AI score0.00215EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2021/04/21 3:14 p.m.69 views

CVE-2021-30139

CVE-2021-30139 affects Alpine Linux apk-tools prior to 2.12.5. The tarball parser contains a buffer overflow that can cause a crash (availability impact). Upgrading to apk-tools 2.12.5 or later is the documented remediation. This vulnerability is supported by multiple sources across OSV, NVD, Red...

7.5CVSS7.7AI score0.00215EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2021/04/21 3:14 p.m.12 views

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

8AI score0.00215EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2021/04/21 3:14 p.m.27 views

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

7.5CVSS7.9AI score0.00215EPSS
Exploits0
CNNVD
CNNVD
added 2021/04/21 12:0 a.m.3 views

Alpine Linux apk-tools 缓冲区错误漏洞

Alpine Linux is a lightweight Linux distribution for security applications. apk-tools is one of the shell-based package managers. A security vulnerability exists in Alpine Linux apk-tools versions prior to 2.12.5, which stems from a buffer overflow and crash allowed by the tarball parser...

7.5CVSS7.5AI score0.00215EPSS
Exploits0References3
OSV
OSV
added 2021/03/24 7:15 a.m.15 views

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

5.5CVSS6.2AI score
Exploits0References4
OSV
OSV
added 2021/03/24 7:15 a.m.1 views

ALPINE-CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

5.5CVSS6.4AI score0.01953EPSS
Exploits2References1
Prion
Prion
added 2021/03/24 7:15 a.m.19 views

Design/Logic Flaw

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

2.1CVSS5.1AI score0.01953EPSS
Exploits2References4Affected Software1
UbuntuCve
UbuntuCve
added 2021/03/24 7:15 a.m.32 views

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

5.5CVSS6.1AI score0.01953EPSS
Exploits2References5
Cvelist
Cvelist
added 2021/03/24 6:32 a.m.23 views

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

5.4AI score0.01953EPSS
Exploits2References4
CVE
CVE
added 2021/03/24 6:32 a.m.129 views

CVE-2021-29133

CVE-2021-29133 affects haserl, a component of the Alpine Linux Configuration Framework. Before 0.9.36, it fails to verify context, enabling local users to read arbitrary files on the filesystem. Affected: haserl prior to 0.9.36 (Alpine Linux Configuration Framework). Known remediation: upgrade to...

5.5CVSS5AI score0.01953EPSS
Exploits2References4Affected Software1
Rows per page
Query Builder