Known vulnerabilities in cabextract (Alpine package)

Vendor: Alpine Linux Development Team
Software: cabextract (Alpine package)
Software CPE: cpe:2.3:o:alpine:cabextract_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cabextract (Alpine package) cabextract (Alpine package) is affected by 7 known vulnerabilities: 2 high, 4 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32433 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-2060		 CWE-22 Medium
No
No
 1.6-r0 29.11.2019 SB2019112916
SB2015050503
SB2015022601
and 3 more
#VU22957 - Missing release of memory after effective lifetime
CVE-2019-15681		 CWE-401 Medium
No
No
 1.9.1-r0 25.11.2019 SB2019102921
SB2020072605
SB2020051150
and 4 more
#VU19259 - Out-of-bounds read
CVE-2019-13616		 CWE-125 Medium
No
No
 1.9.1-r0 19.07.2019 SB2019021411
SB2019100101
SB2019100102
and 17 more
#VU15530 - Out-of-bounds write
CVE-2018-18584		 CWE-787 High
No
No
 1.9-r0 24.10.2018 SB2018102511
SB2018102512
SB2019080631
and 8 more
#VU310 - Improper Access Control
CVE-2015-1419		 CWE-284 Low
No
No
 1.9.1-r0 15.08.2016 SB2015012801
SB2020031615
SB2020031631
and 3 more
#VU33081 - Memory corruption
CVE-2014-9488		 CWE-119 High
No
No
 1.6-r0 14.04.2015 SB2015050504
SB2015060106
SB2015060107
and 2 more
#VU33082 - Data Handling
CVE-2014-9706		 CWE-19 Medium
No
No
 1.6-r0 31.03.2015 SB2015032404
SB2015032314
SB2015032315
and 2 more