PT-2022-7424 · Zabbix · Zabbix-Agent2

Name of the Vulnerable Software and Affected Versions: zabbix-agent2 versions prior to 5.4.9-r1 Description: The issue is related to a design flaw in the zabbix-agent2 package for Alpine Linux, where it incorrectly relies on systemd to determine part of the configuration, leading to a potential...

ALPINE-CVE-2021-4192

vim is vulnerable to Use After Free...

ALPINE-CVE-2021-4173

vim is vulnerable to Use After Free...

ALPINE-CVE-2021-4136

vim is vulnerable to Heap-based Buffer Overflow...

SUSE SLES12 Security Update : sles12sp2-docker-image (SUSE-SU-2021:4011-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:4011-1 advisory. - Invalidate the root password was empty before bsc1134524 CVE-2019-5021 Note that SUSE does not recommend use of this image anymore, please use newer...

ALPINE-CVE-2021-4069

vim is vulnerable to Use After Free...

Moderate: Red Hat Security Advisory: ACS 3.67 security and enhancement update

Updated images are now available for Red Hat Advanced Cluster Security for Kubernetes RHACS. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

ALPINE-CVE-2021-4019

vim is vulnerable to Heap-based Buffer Overflow...

ALPINE-CVE-2021-3927

vim is vulnerable to Heap-based Buffer Overflow...

ALPINE-CVE-2021-3875

vim is vulnerable to Heap-based Buffer Overflow...

openSUSE 15 Security Update : haserl (openSUSE-SU-2021:1279-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1279-1 advisory. - Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any...

ALPINE-CVE-2021-3796

vim is vulnerable to Use After Free...

DEBIAN-CVE-2021-38370

In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...

ALPINE-CVE-2021-36976

libarchive 3.4.1 through 3.5.1 has a use-after-free in copystring called from douncompressblock and processblock...

ALPINE-CVE-2021-32749

fail2ban is a daemon to ban hosts that cause multiple authentication errors. In versions 0.9.7 and prior, 0.10.0 through 0.10.6, and 0.11.0 through 0.11.2, there is a vulnerability that leads to possible remote code execution in the mailing action mail-whois. Command mail from mailutils package...

CVE-2021-36158

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...

CVE-2021-36158

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...

ALPINE-CVE-2021-36158

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...

CVE-2021-36158

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...

Code injection

In the xrdp package in branches through 3.14 for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used...