Known vulnerabilities in libgit2-1.0 (Alpine package)

Vendor: Alpine Linux Development Team
Software: libgit2-1.0 (Alpine package)
Software CPE: cpe:2.3:o:alpine:libgit2-1.0_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libgit2-1.0 (Alpine package) libgit2-1.0 (Alpine package) is affected by 17 known vulnerabilities: 6 high, 5 medium, 6 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47739 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-26891		 CWE-79 Low
No
No
 1.0.1-r1 19.10.2020 SB2020102036
SB2020110308
SB2020101618
#VU23555 - Incorrect Default Permissions
CVE-2019-1353		 CWE-276 Low
No
No
 1.0.1-r1 12.12.2019 SB2019121207
SB2019121209
SB2019121215
and 10 more
#VU23554 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-1348		 CWE-22 Medium
No
No
 1.0.1-r1 12.12.2019 SB2019121207
SB2019121209
SB2019121215
and 15 more
#VU23500 - Absolute Path Traversal
CVE-2019-1351		 CWE-36 Medium
No
No
 1.0.1-r1 10.12.2019 SB2019121019
SB2019121201
SB2019121209
and 10 more
#VU23494 - Improper input validation
CVE-2019-1349		 CWE-20 High
No
No
 1.0.1-r1 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 16 more
#VU23493 - Improper input validation
CVE-2019-1350		 CWE-20 High
No
No
 1.0.1-r1 10.12.2019 SB2019121019
SB2019121201
SB2019121209
and 11 more
#VU23492 - Improper input validation
CVE-2019-1352		 CWE-20 High
No
No
 1.0.1-r1 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 18 more
#VU23491 - Improper input validation
CVE-2019-1354		 CWE-20 High
No
No
 1.0.1-r1 10.12.2019 SB2019121019
SB2019121201
SB2019121209
and 10 more
#VU23488 - Improper input validation
CVE-2019-1387		 CWE-20 High
No
No
 1.0.1-r1 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 19 more
#VU14546 - Out-of-bounds read
CVE-2018-15501		 CWE-125 Low
No
No
 1.0.1-r1 25.08.2018 SB2018082810
SB2018082811
SB2018102909
and 4 more
#VU13843 - Out-of-bounds read
CVE-2018-10888		 CWE-125 Low
No
No
 1.0.1-r1 12.07.2018 SB2018071206
SB2018082811
SB2018102909
and 5 more
#VU13842 - Integer overflow
CVE-2018-10887		 CWE-125 Low
No
No
 1.0.1-r1 11.07.2018 SB2018071206
SB2018082811
SB2018102909
and 5 more
#VU32000 - Memory corruption
CVE-2016-10128		 CWE-119 High
No
No
 1.0.1-r1 24.03.2017 SB2017032404
SB2017012615
SB2017011506
and 5 more
#VU32001 - NULL Pointer Dereference
CVE-2016-10129		 CWE-476 Medium
No
No
 1.0.1-r1 24.03.2017 SB2017032405
SB2017012616
SB2017011506
and 5 more
#VU32002 - Improper Access Control
CVE-2016-10130		 CWE-284 Medium
No
No
 1.0.1-r1 24.03.2017 SB2017032406
SB2017012617
SB2017011506
and 5 more
#VU32003 - Out-of-bounds read
CVE-2016-8568		 CWE-125 Low
No
No
 1.0.1-r1 03.02.2017 SB2017020304
SB2016120202
SB2016111608
and 6 more
#VU32004 - NULL Pointer Dereference
CVE-2016-8569		 CWE-476 Medium
No
No
 1.0.1-r1 03.02.2017 SB2017020305
SB2016120203
SB2016111608
and 6 more