Known vulnerabilities in evince (Alpine package)

Vendor: Alpine Linux Development Team
Software: evince (Alpine package)
Software CPE: cpe:2.3:o:alpine:evince_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting evince (Alpine package) evince (Alpine package) is affected by 7 known vulnerabilities: 3 high, 3 medium, 1 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU29244 - Access of Uninitialized Pointer
CVE-2019-11459		 CWE-824 Low
No
No
 - 25.06.2020 -
#VU33104 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5743		 CWE-89 High
Available
No
 2.32.0-r8 11.12.2019 SB2013100803
SB2013100203
SB2013100204
and 1 more
#VU7546 - Improper Control of Generation of Code ('Code Injection')
CVE-2017-1000083		 CWE-94 High
Available
No
 3.24.0-r2, 3.24.1-r0 14.07.2017 SB2017071410
SB2017071309
SB2017071706
and 12 more
#VU32817 - Improper input validation
CVE-2010-2640		 CWE-20 Medium
No
No
 2.32.0-r8 07.01.2011 SB2011010702
SB2012042004
SB2011112002
#VU32818 - Improper input validation
CVE-2010-2641		 CWE-20 Medium
No
No
 2.32.0-r8 07.01.2011 SB2011010703
SB2012042005
SB2011112002
#VU32060 - Heap-based Buffer Overflow
CVE-2010-2642		 CWE-122 High
No
No
 2.32.0-r8 07.01.2011 SB2011010701
SB2012042002
SB2012042003
and 1 more
#VU33874 - Improper input validation
CVE-2010-2643		 CWE-20 Medium
No
No
 2.32.0-r8 07.01.2011 SB2011010704
SB2012042006
SB2011112002