Known vulnerabilities in libressl (Alpine package)
Vendor:
Alpine Linux Development Team
Software:
libressl (Alpine package)
Software CPE:
cpe:2.3:o:alpine:libressl_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website:
https://alpinelinux.org/
Total vulnerabilities:
3
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
2.1.4-r0
2.2.5-r0
2.5.3-r0
2.6.5-r0
2.5.5-r4
2.5.4-r0
2.5.5-r0
2.9.2-r1
2.7.5-r1
2.9.2-r0
3.1.2-r0
2.7.5-r0
2.6.4-r2
2.7.3-r1
2.6.3-r0
2.6.4-r0
2.7.2-r0
2.7.3-r0
2.7.4-r2
3.1.3-r0
2.7.4-r1
3.1.4-r0
2.2.6-r0
2.2.6-r1
2.4.3-r2
2.4.4-r0
2.4.3-r1
2.4.3-r0
2.4.2-r0
2.5.5-r2
2.4.5-r0
2.5.5-r1
2.6.4-r1
2.5.5-r3
3.1.5-r0
2.5.3-r1
2.7.4-r0
3.2.5-r0
3.0.2-r0
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 3.1.5-r0 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU32983 - Improper Certificate Validation CVE-2017-8301 |
CWE-295 | Medium | 2.5.3-r1 | 03.08.2020 |
SB2017042708 SB2017042710 |
||
| #VU13370 - Exposure of sensitive information to an unauthorized actor CVE-2018-0495 |
CWE-200 | Low | 2.6.5-r0 | 16.06.2018 |
SB2018061705 SB2018061412 SB2018061801 and 22 more |