Known vulnerabilities in file (Alpine package)

Known vulnerabilities in file (Alpine package)

Vendor: Alpine Linux Development Team

Software: file (Alpine package)

Software CPE: cpe:2.3:o:alpine:file_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU33374 - Insufficiently Protected Credentials CVE-2019-19218	CWE-522	Medium	No	No	5.32-r2	30.04.2020	SB2019102816
#VU22303 - Heap-based Buffer Overflow CVE-2019-18218	CWE-122	Low	No	No	5.32-r2	27.10.2019	SB2019102701 SB2019102702 SB2019103019 and 25 more
#VU17908 - Use of a Broken or Risky Cryptographic Algorithm CVE-2019-1543	CWE-327	Low	No	No	5.36-r1	06.03.2019	SB2019030602 SB2019040410 SB2019061209 and 13 more
#VU17829 - Out-of-bounds read CVE-2019-8904	CWE-125	Low	No	No	5.36-r0	22.02.2019	SB2019022104 SB2019031803 SB2019030303 and 3 more
#VU17823 - Out-of-bounds read CVE-2019-8906	CWE-125	Low	No	No	5.32-r1	21.02.2019	SB2019022104 SB2019031803 SB2019041205 and 8 more
#VU17822 - Stack-based buffer overflow CVE-2019-8907	CWE-121	Low	No	No	5.32-r1	21.02.2019	SB2019022104 SB2019031803 SB2019041205 and 7 more
#VU17821 - Out-of-bounds read CVE-2019-8905	CWE-125	Low	No	No	5.32-r1	21.02.2019	SB2019022104 SB2019031803 SB2019041205 and 7 more
#VU16078 - Resource exhaustion CVE-2014-1943	CWE-400	Low	No	No	5.17-r0	27.11.2018	SB2015030301 SB2014032502 SB2014032503 and 5 more
#VU3894 - Resource exhaustion CVE-2014-8117	CWE-400	Low	No	No	5.22-r0	01.04.2016	SB2015031801 SB2014122701 SB2015013010
#VU32448 - Resource Management Errors CVE-2014-9621	CWE-399	Medium	No	No	5.22-r0	21.01.2015	SB2015012102 SB2015020217 SB2015031603
#VU32447 - Resource Management Errors CVE-2014-9620	CWE-399	Medium	No	No	5.22-r0	21.01.2015	SB2015012101 SB2015020216 SB2015031603
#VU32446 - Resource Management Errors CVE-2014-8116	CWE-399	Medium	No	No	5.22-r0	17.12.2014	SB2014121701 SB2015013009
#VU32500 - Improper input validation CVE-2014-3538	CWE-20	Medium	No	No	5.19-r0	03.07.2014	SB2014070302 SB2014072101 SB2014072102 and 2 more
#VU32802 - Memory corruption CVE-2012-1571	CWE-119	Medium	No	No	5.11-r0	18.07.2012	SB2012071801 SB2012041904 SB2014091920 and 2 more