Known vulnerabilities in krb5 (Alpine package)

Vendor: Alpine Linux Development Team
Software: krb5 (Alpine package)
Software CPE: cpe:2.3:o:alpine:krb5_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 22
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting krb5 (Alpine package) krb5 (Alpine package) is affected by 22 known vulnerabilities: 1 high, 15 medium, 6 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48444 - Uncontrolled Recursion
CVE-2020-28196		 CWE-674 Medium
No
No
 - 06.11.2020 SB2020111617
SB2020111618
SB2020112306
and 23 more
#VU33342 - NULL Pointer Dereference
CVE-2018-5710		 CWE-476 Medium
No
No
 1.15.3-r0 04.08.2020 SB2018011616
SB2018082119
#VU17350 - Reachable Assertion
CVE-2018-20217		 CWE-617 Low
No
No
 1.14.3-r3 01.02.2019 SB2019012517
SB2019011813
SB2019090310
and 9 more
#VU33448 - Integer overflow
CVE-2018-5709		 CWE-190 Medium
No
No
 1.15.3-r0 16.01.2018 SB2018082121
SB2026042816
#VU33498 - Memory corruption
CVE-2017-15088		 CWE-119 High
No
No
 1.15.3-r0 23.11.2017 SB2017111017
SB2017110816
SB2018082122
and 2 more
#VU32240 - NULL Pointer Dereference
CVE-2016-3120		 CWE-476 Medium
No
No
 1.13.6-r0 01.08.2016 SB2016080111
SB2016091423
SB2017020665
and 6 more
#VU33628 - Improper input validation
CVE-2016-3119		 CWE-20 Medium
No
No
 1.12.4-r2 26.03.2016 SB2016050518
SB2017020665
SB2016031810
and 3 more
#VU32307 - Memory corruption
CVE-2015-8631		 CWE-119 Medium
No
No
 1.12.4-r1 13.02.2016 SB2016021303
SB2016022214
SB2016042112
and 3 more
#VU32306 - NULL Pointer Dereference
CVE-2015-8630		 CWE-476 Medium
No
No
 1.12.4-r1 13.02.2016 SB2016021302
SB2016022213
SB2016042112
and 3 more
#VU32305 - Memory corruption
CVE-2015-8629		 CWE-119 Low
No
No
 1.12.4-r1 13.02.2016 SB2016021301
SB2016022212
SB2016042112
and 3 more
#VU33639 - Memory corruption
CVE-2015-2698		 CWE-119 Medium
No
No
 1.12.4-r0 13.11.2015 SB2015111302
SB2015120204
SB2015110507
and 2 more
#VU32373 - Out-of-bounds read
CVE-2015-2697		 CWE-125 Low
No
No
 1.12.1-r2 09.11.2015 SB2015110909
SB2015111601
SB2015110403
and 7 more
#VU33819 - Improper input validation
CVE-2015-2696		 CWE-20 Medium
No
No
 1.12.1-r2 09.11.2015 SB2015110911
SB2015111601
SB2015110403
and 7 more
#VU33818 - Improper input validation
CVE-2015-2695		 CWE-20 Medium
No
No
 1.12.1-r2 09.11.2015 SB2015110910
SB2015111601
SB2015110402
and 9 more
#VU32374 - Permissions, Privileges, and Access Controls
CVE-2015-2694		 CWE-264 Medium
No
No
 1.12.1-r2 25.05.2015 SB2015052502
SB2015120103
SB2015121405
and 2 more
#VU32453 - NULL Pointer Dereference
CVE-2014-5354		 CWE-476 Low
No
No
 1.13-r1 17.12.2014 SB2014121703
SB2015013013
#VU32452 - Improper input validation
CVE-2014-5353		 CWE-20 Low
No
No
 1.13-r1 17.12.2014 SB2014121702
SB2015013012
SB2015050506
and 3 more
#VU32358 - Credentials Management
CVE-2014-5351		 CWE-255 Low
No
No
 1.12.4-r0 10.10.2014 SB2014101002
SB2015120913
SB2015021602
and 2 more
#VU33658 - Out-of-bounds read
CVE-2014-4341		 CWE-125 Medium
No
No
 1.11.2-r3 20.07.2014 SB2014072220
#VU33659 - Out-of-bounds read
CVE-2014-4342		 CWE-125 Medium
No
No
 1.11.2-r3 20.07.2014 SB2014072221


Showing elements 1 - 20 out of 22