Known vulnerabilities in binutils (Alpine package)

Vendor: Alpine Linux Development Team
Software: binutils (Alpine package)
Software CPE: cpe:2.3:o:alpine:binutils_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting binutils (Alpine package) binutils (Alpine package) is affected by 20 known vulnerabilities: 1 high, 8 medium, 11 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU11310 - NULL Pointer Dereference
CVE-2018-7642		 CWE-476 Low
No
No
 2.30-r2 28.03.2018 SB2018022402
SB2019081111
SB2018112746
#VU11271 - Integer overflow
CVE-2018-7643		 CWE-190 Low
No
No
 2.30-r2 26.03.2018 SB2018030113
SB2019081112
SB2018112746
#VU11262 - Improper Resource Shutdown or Release
CVE-2018-8945		 CWE-404 Low
No
No
 2.30-r2 26.03.2018 SB2018020714
SB2019081113
SB2018112746
#VU11128 - Memory corruption
CVE-2018-6759		 CWE-119 Low
No
No
 2.30-r2 16.03.2018 SB2018020614
SB2019081105
SB2018112746
#VU11090 - Integer overflow
CVE-2018-7569		 CWE-191 Low
No
No
 2.30-r2 14.03.2018 SB2018022312
SB2019081109
SB2018112746
#VU11089 - Integer overflow
CVE-2018-7568		 CWE-190 Low
No
No
 2.30-r2 14.03.2018 SB2018022312
SB2019081108
SB2018112746
#VU11088 - NULL Pointer Dereference
CVE-2018-7570		 CWE-476 Low
No
No
 2.30-r2 14.03.2018 SB2018022312
SB2019081110
SB2018112746
#VU10837 - Improper input validation
CVE-2018-7208		 CWE-20 Low
No
No
 2.30-r2 05.03.2018 SB2018012411
SB2019081107
SB2018112746
and 3 more
#VU10447 - Out-of-bounds read
CVE-2018-6872		 CWE-125 Low
No
No
 2.30-r2 12.02.2018 SB2018021201
SB2019081106
SB2018112746
#VU10366 - Integer overflow
CVE-2018-6543		 CWE-190 Low
No
No
 2.30-r2 05.02.2018 SB2018020504
SB2019081104
SB2018112746
and 2 more
#VU32064 - Out-of-bounds read
CVE-2017-9038		 CWE-125 Medium
No
No
 2.28-r3 18.05.2017 SB2017051814
SB2017101952
SB2017091709
#VU32127 - NULL Pointer Dereference
CVE-2017-7614		 CWE-476 High
No
No
 2.26-r1 09.04.2017 SB2017040909
SB2017042529
SB2017091709
#VU32474 - Memory corruption
CVE-2014-8738		 CWE-119 Medium
No
No
 2.24-r3 15.01.2015 SB2015011501
SB2014120849
SB2015121406
and 6 more
#VU32473 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-8737		 CWE-22 Low
No
No
 2.24-r3 10.12.2014 SB2014121009
SB2014120848
SB2015121406
and 4 more
#VU32472 - Stack-based buffer overflow
CVE-2014-8504		 CWE-121 Medium
No
No
 2.24-r3 10.12.2014 SB2014121008
SB2014120847
SB2015121406
and 6 more
#VU32471 - Stack-based buffer overflow
CVE-2014-8503		 CWE-121 Medium
No
No
 2.24-r3 10.12.2014 SB2014121007
SB2014120846
SB2015121406
and 6 more
#VU32470 - Heap-based Buffer Overflow
CVE-2014-8502		 CWE-122 Medium
No
No
 2.24-r3 10.12.2014 SB2014121006
SB2014120845
SB2015121406
and 6 more
#VU32469 - Memory corruption
CVE-2014-8501		 CWE-119 Medium
No
No
 2.24-r3 10.12.2014 SB2014121005
SB2014120844
SB2015121406
and 6 more
#VU32468 - Improper Control of Generation of Code ('Code Injection')
CVE-2014-8485		 CWE-94 Medium
No
No
 2.24-r3 10.12.2014 SB2014121004
SB2014120843
SB2015121406
and 3 more
#VU32467 - Memory corruption
CVE-2014-8484		 CWE-119 Medium
No
No
 2.24-r3 10.12.2014 SB2014121003
SB2014120842
SB2015121406
and 1 more