Known vulnerabilities in libmodplug (Alpine package)

Vendor: Alpine Linux Development Team
Software: libmodplug (Alpine package)
Software CPE: cpe:2.3:o:alpine:libmodplug_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 29
Public exploits: 5
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libmodplug (Alpine package) libmodplug (Alpine package) is affected by 29 known vulnerabilities: 8 high, 14 medium, 7 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33104 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2013-5743		 CWE-89 High
Available
No
 - 11.12.2019 SB2013100803
SB2013100203
SB2013100204
and 1 more
#VU33100 - Improper input validation
CVE-2014-1235		 CWE-20 Medium
No
No
 - 07.08.2017 SB2014020530
SB2014030606
SB2014030607
and 3 more
#VU33098 - Improper Authentication
CVE-2014-1682		 CWE-287 Low
No
No
 - 08.05.2014 SB2014030311
SB2014021206
SB2014021302
and 1 more
#VU33096 - Stack-based buffer overflow
CVE-2014-0004		 CWE-121 High
No
No
 0.8.8.5-r0 11.03.2014 SB2014031116
SB2014031117
SB2014050206
and 2 more
#VU33099 - Stack-based buffer overflow
CVE-2014-0978		 CWE-121 High
No
No
 - 10.01.2014 SB2014020529
SB2014030606
SB2014030607
and 6 more
#VU33101 - Stack-based buffer overflow
CVE-2014-1236		 CWE-121 High
No
No
 - 10.01.2014 SB2014020531
SB2014030606
SB2014030607
and 3 more
#VU33103 - Improper Control of Generation of Code ('Code Injection')
CVE-2013-6824		 CWE-94 Medium
No
No
 - 19.12.2013 SB2013120914
SB2014012304
SB2013120320
and 2 more
#VU33102 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-4492		 CWE-79 Low
No
No
 - 07.12.2013 SB2014020532
#VU33097 - Permissions, Privileges, and Access Controls
CVE-2013-5572		 CWE-264 Low
Available
No
 - 01.10.2013 SB2014030310
SB2014021206
SB2014021302
and 1 more
#VU33094 - Memory corruption
CVE-2013-4234		 CWE-119 Medium
No
No
 0.8.8.5-r0 16.09.2013 SB2014031329
SB2014081602
SB2014082705
#VU33093 - Heap-based Buffer Overflow
CVE-2013-4233		 CWE-122 Medium
No
No
 0.8.8.5-r0 16.09.2013 SB2014031328
SB2014081602
SB2014082705
#VU33106 - Stack-based buffer overflow
CVE-2013-1428		 CWE-121 Low
Available
No
 - 26.04.2013 SB2013042504
#VU33105 - Heap-based Buffer Overflow
CVE-2012-5129		 CWE-122 Medium
No
No
 - 04.12.2012 SB2013051602
SB2015050703
#VU33120 - Heap-based Buffer Overflow
CVE-2011-2911		 CWE-122 Medium
No
No
 0.8.8.4-r0 07.06.2012 SB2012022803
SB2012031601
SB2012031602
and 1 more
#VU33121 - Stack-based buffer overflow
CVE-2011-2912		 CWE-121 Medium
No
No
 0.8.8.4-r0 07.06.2012 SB2012022804
SB2012031601
SB2012031602
and 1 more
#VU33119 - Improper input validation
CVE-2011-1761		 CWE-20 Medium
Available
No
 0.8.8.4-r0 07.06.2012 SB2012022802
SB2011050904
SB2015061305
#VU33122 - Improper input validation
CVE-2012-0840		 CWE-20 Medium
Available
No
 0.8.8.4-r0 10.02.2012 SB2012022808
#VU33123 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2011-2931		 CWE-79 Low
No
No
 - 29.08.2011 SB2012013103
#VU33124 - Improper Control of Generation of Code ('Code Injection')
CVE-2011-3186		 CWE-94 Medium
No
No
 - 29.08.2011 SB2012013104
#VU33125 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2011-2930		 CWE-89 Medium
No
No
 - 29.08.2011 SB2012013105


Showing elements 1 - 20 out of 29