Known vulnerabilities in gnutls (Alpine package)

Known vulnerabilities in gnutls (Alpine package)

Vendor: Alpine Linux Development Team

Software: gnutls (Alpine package)

Software CPE: cpe:2.3:o:alpine:gnutls_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 16

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU46295 - NULL Pointer Dereference CVE-2020-24659	CWE-476	Medium	No	No	3.6.15-r0	04.09.2020	SB2020090415 SB2020090416 SB2020090604 and 11 more
#VU28557 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2020-13777	CWE-300	Medium	Available	No	3.6.14-r0	04.06.2020	SB2020060401 SB2020060402 SB2020060606 and 13 more
#VU26487 - Use of Insufficiently Random Values CVE-2020-11501	CWE-330	Medium	No	No	3.6.13-r0, 3.6.14-r0	31.03.2020	SB2020033128 SB2020033129 SB2020040316 and 7 more
#VU18107 - Double Free CVE-2019-3829	CWE-415	High	No	No	3.6.1-r0, 3.6.7-r0	01.04.2019	SB2019040104 SB2019041506 SB2019050903 and 6 more
#VU18106 - Memory corruption CVE-2019-3836	CWE-119	Medium	No	No	3.6.7-r0	01.04.2019	SB2019040104 SB2019041506 SB2019050903 and 6 more
#VU7655 - Improper input validation CVE-2016-7444	CWE-20	Low	No	No	3.3.18-r1	02.08.2017	SB2016090201 SB2017080109 SB2017032005 and 13 more
#VU7481 - NULL Pointer Dereference CVE-2017-7507	CWE-476	Medium	No	No	3.4.17-r0, 3.4.17-r1	12.07.2017	SB2017060705 SB2017071210 SB2017080109 and 10 more
#VU32426 - Improper input validation CVE-2015-3308	CWE-20	Medium	No	No	3.3.14-r0	02.09.2015	SB2015090203 SB2015051904 SB2015062201 and 2 more
#VU32394 - Improper input validation CVE-2015-6251	CWE-20	Medium	No	No	3.2.15-r1	24.08.2015	SB2015082412 SB2015091703 SB2016091003 and 4 more
#VU32530 - Memory corruption CVE-2014-3466	CWE-119	Medium	No	No	3.1.25-r0	03.06.2014	SB2014060301 SB2014060401 SB2014061304 and 5 more
#VU32576 - Permissions, Privileges, and Access Controls CVE-2014-1959	CWE-264	Medium	No	No	3.0.29-r1	07.03.2014	SB2014030705 SB2014030511 SB2014061307 and 1 more
#VU32575 - Cryptographic Issues CVE-2014-0092	CWE-310	Medium	No	No	3.0.29-r1	07.03.2014	SB2014030704 SB2014030510 SB2014030403 and 7 more
#VU33306 - Improper input validation CVE-2013-2116	CWE-20	Medium	No	No	2.12.7-r3	03.07.2013	SB2013070303 SB2013060302 SB2014030404 and 5 more
#VU32712 - Cryptographic Issues CVE-2013-1619	CWE-310	Medium	No	No	2.12.7-r1	08.02.2013	SB2013020802 SB2013040804 SB2014030404 and 6 more
#VU32801 - Cryptographic Issues CVE-2012-1573	CWE-310	Medium	No	No	2.10.5-r3	26.03.2012	SB2012032601 SB2012041903 SB2012040507 and 1 more
#VU32707 - Memory corruption CVE-2011-4128	CWE-119	Medium	No	No	2.10.5-r4	08.12.2011	SB2011120801 SB2013041105 SB2012040507 and 1 more