888 matches found
ALPINE-CVE-2021-3974
vim is vulnerable to Use After Free...
ALPINE-CVE-2021-3928
vim is vulnerable to Use of Uninitialized Variable...
ALPINE-CVE-2021-3927
vim is vulnerable to Heap-based Buffer Overflow...
Denial Of Service (DoS)
Alpine is vulnerable to denial of service. The vulnerability exists because untagged responses from an IMAP server are accepted before STARTTLS...
ALPINE-CVE-2021-3875
vim is vulnerable to Heap-based Buffer Overflow...
ALPINE-CVE-2021-22930
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior...
ALPINE-CVE-2021-41524
While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. The vulnerability was recently introduced in version 2.4.49. No exploit is known to the project...
CVE-2021-41034
The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerable to MITM attacks that allow the replacement of the original binaries with arbitrary ones. The stacks involved are Jav...
Slackware Linux 14.0 / 14.1 / 14.2 / current alpine Vulnerability (SSA:2021-264-01)
The version of alpine installed on the remote host is prior to 2.25. It is, therefore, affected by a vulnerability as referenced in the SSA:2021-264-01 advisory. - In Alpine through 2.24, untagged responses from an IMAP server are accepted before STARTTLS. CVE-2021-38370 Note that Nessus has not...
[slackware-security] alpine
New alpine packages are available for Slackware 14.0, 14.1, 14.2, and -current to fix a security issue. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/alpine-2.25-i586-1slack14.2.txz: Upgraded. Fixed a denial-of-service security issue where untagged responses from an IMA...
openSUSE 15 Security Update : haserl (openSUSE-SU-2021:1279-1)
The remote SUSE Linux SUSE15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE-SU-2021:1279-1 advisory. - Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any...
ALPINE-CVE-2020-21598
libde265 v1.0.4 contains a heap buffer overflow in the ffhevcputunweightedpred8sse function, which can be exploited via a crafted a file...
ALPINE-CVE-2020-21601
libde265 v1.0.4 contains a stack buffer overflow in the putqpelfallback function, which can be exploited via a crafted a file...
ALPINE-CVE-2021-3796
vim is vulnerable to Use After Free...
ALPINE-CVE-2021-3770
vim is vulnerable to Heap-based Buffer Overflow...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
DEBIAN-CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...
Design/Logic Flaw
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS...