Known vulnerabilities in bash (Alpine package)

Known vulnerabilities in bash (Alpine package)

Vendor: Alpine Linux Development Team

Software: bash (Alpine package)

Software CPE: cpe:2.3:o:alpine:bash_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 10

Public exploits: 6

Known exploited (KEV): 3

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU13103 - Improper input validation CVE-2016-0634	CWE-20	High	No	No	4.4.12-r0	28.05.2018	SB2018052514 SB2016121354 SB2017090814 and 9 more
#VU13104 - Command injection CVE-2016-7543	CWE-77	Low	No	No	4.3.30-r1	28.05.2018	SB2018052514 SB2017080113 SB2017090814 and 10 more
#VU5328 - Off-by-one Error CVE-2014-7187	CWE-193	Critical	Available	No	4.2.051-r0	24.01.2017	SB2014091201 SB2015092701 SB2014100401 and 24 more
#VU5327 - Memory corruption CVE-2014-7186	CWE-119	Critical	Available	No	4.2.051-r0	24.01.2017	SB2014091201 SB2015092701 SB2014100401 and 26 more
#VU5322 - Command injection CVE-2014-6278	CWE-77	Critical	Available	Exploited	4.3.30-r0	24.01.2017	SB2014091201 SB2015100901 SB2014100401 and 19 more
#VU5295 - Command injection CVE-2014-6271	CWE-77	Critical	Available	Exploited	4.2.048-r0, 4.2.049-r0	24.01.2017	SB2014091201 SB2015092401 SB2015092613 and 46 more
#VU5294 - Command injection CVE-2014-7169	CWE-77	Critical	Available	Exploited	4.2.050-r0	24.01.2017	SB2014091201 SB2015092501 SB2015092502 and 37 more
#VU33511 - Use After Free CVE-2016-9401	CWE-416	Low	No	No	4.3.33-r2	23.01.2017	SB2017011343 SB2017083137 SB2017010103 and 3 more
#VU32768 - Stack-based buffer overflow CVE-2012-3410	CWE-121	Medium	No	No	4.1.011-r0	28.08.2012	SB2012082801 SB2012091811 SB2014092505
#VU33112 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2012-3435	CWE-89	Medium	Available	No	4.1.011-r0	15.08.2012	SB2012091105 SB2012082207