Known vulnerabilities in apache2 (Alpine package) 2.4.23-r10

Vendor: Alpine Linux Development Team
Software: apache2 (Alpine package)
Version: 2.4.23-r10
Software CPE: cpe:2.3:o:alpine:apache2_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 25
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting apache2 (Alpine package) version 2.4.23-r10 apache2 (Alpine package) 2.4.23-r10 is affected by 25 vulnerabilities: 17 medium, 8 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU35880 - Improper input validation
CVE-2020-9490		 CWE-20 Medium
No
No
 - 08.08.2020 SB2020080806
SB2020080807
SB2020082904
and 17 more
#VU35854 - Resource Management Errors
CVE-2020-11993		 CWE-399 Medium
No
No
 - 08.08.2020 SB2020080806
SB2020080807
SB2020082904
and 15 more
#VU26528 - Use of Uninitialized Variable
CVE-2020-1934		 CWE-457 Medium
No
No
 2.4.43-r0 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 20 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927		 CWE-601 Medium
No
No
 2.4.43-r0 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more
#VU20340 - Resource Management Errors
CVE-2019-9517		 CWE-399 Medium
No
No
 2.4.41-r0 20.08.2019 SB2019082303
SB2019082610
SB2019090202
and 37 more
#VU18113 - Improper input validation
CVE-2019-0220		 CWE-20 Low
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18111 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2019-0217		 CWE-362 Low
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU18110 - Permissions, Privileges, and Access Controls
CVE-2019-0211		 CWE-264 Low
Public exploit available
Exploited
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 21 more
#VU18109 - Use After Free
CVE-2019-0196		 CWE-416 Medium
No
No
 2.4.39-r0 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 17 more
#VU17178 - Improper Access Control
CVE-2018-17199		 CWE-284 Low
No
No
 2.4.38-r0 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU17177 - Improper input validation
CVE-2018-17189		 CWE-20 Medium
No
No
 2.4.38-r0 23.01.2019 SB2019012307
SB2019012308
SB2019012508
and 18 more
#VU14913 - Resource Management Errors
CVE-2018-11763		 CWE-399 Medium
No
No
 2.4.35-r0 27.09.2018 SB2018092701
SB2018101701
SB2018111102
and 8 more
#VU13908 - Improper input validation
CVE-2018-1333		 CWE-20 Medium
No
No
 2.4.34-r0 18.07.2018 SB2018071805
SB2018071901
SB2018072014
and 6 more
#VU13907 - Improper input validation
CVE-2018-8011		 CWE-20 Medium
No
No
 2.4.34-r0 18.07.2018 SB2018071805
SB2018071901
SB2018072014
and 5 more
#VU11287 - NULL Pointer Dereference
CVE-2018-1302		 CWE-476 Medium
No
No
 2.4.33-r0 27.03.2018 SB2018032703
SB2018040502
SB2018050401
and 7 more
#VU11284 - Permissions, Privileges, and Access Controls
CVE-2017-15715		 CWE-264 Low
No
No
 2.4.33-r0 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11283 - Out-of-bounds write
CVE-2017-15710		 CWE-787 Medium
No
No
 2.4.33-r0 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11282 - Improper input validation
CVE-2018-1283		 CWE-20 Low
No
No
 2.4.33-r0 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 12 more
#VU11281 - Out-of-bounds read
CVE-2018-1301		 CWE-125 Medium
No
No
 2.4.33-r0 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 13 more
#VU11279 - Permissions, Privileges, and Access Controls
CVE-2018-1312		 CWE-264 Low
No
No
 2.4.33-r0 27.03.2018 SB2018032703
SB2018040401
SB2018040502
and 12 more


Showing elements 1 - 20 out of 25