Known vulnerabilities in apache2 (Alpine package)

Vendor: Alpine Linux Development Team
Software: apache2 (Alpine package)
Software CPE: cpe:2.3:o:alpine:apache2_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 62
Public exploits: 13
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apache2 (Alpine package) apache2 (Alpine package) is affected by 62 known vulnerabilities: 2 high, 43 medium, 17 low Critical High Medium Low

Vulnerabilities (62)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35880 - Improper input validation
CVE-2020-9490		 CWE-20 Medium
No
No
 - 08.08.2020 SB2020080806
SB2020080807
SB2020082904
and 17 more
#VU35854 - Resource Management Errors
CVE-2020-11993		 CWE-399 Medium
No
No
 - 08.08.2020 SB2020080806
SB2020080807
SB2020082904
and 15 more
#VU35713 - Memory corruption
CVE-2020-11984		 CWE-119 High
Available
No
 - 08.08.2020 SB2020080806
SB2020080807
SB2020082904
and 22 more
#VU26528 - Use of Uninitialized Variable
CVE-2020-1934		 CWE-457 Medium
No
No
 2.4.43-r0 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 20 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927		 CWE-601 Medium
No
No
 2.4.43-r0 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more
#VU20386 - Use After Free
CVE-2019-10082		 CWE-416 Medium
No
No
 2.4.41-r0 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20385 - NULL Pointer Dereference
CVE-2019-10097		 CWE-476 Low
No
No
 2.4.41-r0 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 14 more
#VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10092		 CWE-79 Low
No
No
 2.4.41-r0 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU20374 - Improper input validation
CVE-2019-10098		 CWE-20 Medium
Available
No
 2.4.41-r0 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 19 more
#VU20373 - Out-of-bounds write
CVE-2019-10081		 CWE-787 Medium
No
No
 2.4.41-r0 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 11 more
#VU20340 - Resource Management Errors
CVE-2019-9517		 CWE-399 Medium
No
No
 2.4.41-r0 20.08.2019 SB2019082303
SB2019082610
SB2019090202
and 37 more
#VU18113 - Improper input validation
CVE-2019-0220		 CWE-20 Low
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18112 - Permissions, Privileges, and Access Controls
CVE-2019-0215		 CWE-264 Medium
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019050714
SB2019040244
and 4 more
#VU18111 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-0217		 CWE-362 Low
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18110 - Permissions, Privileges, and Access Controls
CVE-2019-0211		 CWE-264 Low
Available
Exploited
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 21 more
#VU18109 - Use After Free
CVE-2019-0196		 CWE-416 Medium
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18108 - Resource Management Errors
CVE-2019-0197		 CWE-399 Medium
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019041607
SB2019041106
and 13 more
#VU17179 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-0190		 CWE-835 Medium
No
No
 2.4.38-r0 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 7 more
#VU17178 - Improper Access Control
CVE-2018-17199		 CWE-284 Low
No
No
 2.4.38-r0 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU17177 - Improper input validation
CVE-2018-17189		 CWE-20 Medium
No
No
 2.4.38-r0 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more


Showing elements 1 - 20 out of 62