Known vulnerabilities in h2o (Alpine package)

Vendor: Alpine Linux Development Team
Software: h2o (Alpine package)
Software CPE: cpe:2.3:o:alpine:h2o_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting h2o (Alpine package) h2o (Alpine package) is affected by 9 known vulnerabilities: 2 high, 7 medium Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20337 - Resource Management Errors
CVE-2019-9515		 CWE-399 Medium
No
No
 2.2.6-r0 20.08.2019 SB2019082005
SB2019082402
SB2019091011
and 39 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 2.2.6-r0 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 2.2.6-r0 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more
#VU32036 - Memory corruption
CVE-2018-0608		 CWE-119 High
No
No
 2.2.5-r0 26.06.2018 SB2018062618
SB2018060201
#VU32049 - Improper input validation
CVE-2017-10908		 CWE-20 Medium
No
No
 2.2.4-r0 22.12.2017 SB2017122218
SB2017121533
#VU32066 - Improper input validation
CVE-2017-10868		 CWE-20 Medium
No
No
 2.2.3-r0 22.12.2017 SB2017122219
SB2017102018
#VU33770 - Improper input validation
CVE-2017-10872		 CWE-20 Medium
No
No
 2.2.4-r0 22.12.2017 SB2017122220
SB2017121532
#VU33588 - Use After Free
CVE-2016-7835		 CWE-416 High
No
No
 2.0.5-r0 09.06.2017 SB2016122602
#VU32243 - Use of Externally-Controlled Format String
CVE-2016-4864		 CWE-134 Medium
No
No
 2.0.4-r0 12.05.2017 SB2017051221
SB2016100103