CVE-2021-30139

CVE-2021-30139 affects Alpine Linux apk-tools prior to 2.12.5. The tarball parser contains a buffer overflow that can cause a crash (availability impact). Upgrading to apk-tools 2.12.5 or later is the documented remediation. This vulnerability is supported by multiple sources across OSV, NVD, Red...

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

PT-2021-18625

Name of the Vulnerable Software and Affected Versions Alpine Linux apk-tools versions prior to 2.12.5 Description The issue is related to a buffer overflow in the tarball parser, which can cause a crash. Recommendations For versions prior to 2.12.5, update to version 2.12.5 or later to resolve th...

Alpine Linux apk-tools 缓冲区错误漏洞

Alpine Linux is a lightweight Linux distribution for security applications. apk-tools is one of the shell-based package managers. A security vulnerability exists in Alpine Linux apk-tools versions prior to 2.12.5, which stems from a buffer overflow and crash allowed by the tarball parser...

ALPINE-CVE-2021-3487

Rejected reason: Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt...

ALPINE-CVE-2021-31162

In the standard library in Rust before 1.52.0, a double free can occur in the Vec::fromiter function if freeing the element panics...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

ALPINE-CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

Design/Logic Flaw

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

CVE-2021-29133

CVE-2021-29133 affects haserl, a component of the Alpine Linux Configuration Framework. Before 0.9.36, it fails to verify context, enabling local users to read arbitrary files on the filesystem. Affected: haserl prior to 0.9.36 (Alpine Linux Configuration Framework). Known remediation: upgrade to...

CVE-2021-29133

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

PT-2021-18099

Name of the Vulnerable Software and Affected Versions: Alpine Linux Configuration Framework versions prior to 0.9.36 Description: The issue is related to a lack of verification in haserl, a component of Alpine Linux Configuration Framework. This allows local users to read the contents of any file...

Alpine Linux 安全漏洞

Alpine Linux is a lightweight Linux distribution for security applications. A security vulnerability exists in Alpine Linux Configuration Framework before 0.9.36, which stems from a lack of authentication in haserl and allows a local user to read the contents of any file on the file system...

CVE-2021-29133: Undefined Security Weakness

Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem...

ALPINE-CVE-2021-27290

ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option...

ALPINE-CVE-2021-20205

Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image...

ALPINE-CVE-2021-24032

Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to...