Known vulnerabilities in libtasn1 (Alpine package)
Vendor:
Alpine Linux Development Team
Software:
libtasn1 (Alpine package)
Software CPE:
cpe:2.3:o:alpine:libtasn1_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website:
https://alpinelinux.org/
Total vulnerabilities:
10
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.2-r0
2.4-r0
2.6-r2
2.9-r0
2.9-r1
2.12-r0
2.14-r1
4.7-r3
4.8-r3
4.7-r2
4.7-r1
4.7-r0
4.8-r2
4.9-r3
4.8-r1
4.8-r0
4.9-r2
4.10-r3
4.9-r1
4.9-r0
4.12-r4
4.10-r2
4.12-r0
4.10-r1
4.10-r0
4.15.0-r0
2.14-r0
3.6-r3
3.3-r0
3.6-r2
4.5-r0
4.5-r1
3.6-r1
3.6-r0
4.2-r0
3.4-r0
4.12-r3
4.12-r2
4.16.0-r0
4.13-r0
4.14-r0
4.12-r1
4.16.0-r1
Vulnerabilities (10)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU18291 - Improper input validation CVE-2016-4008 |
CWE-20 | Medium | 3.6-r3 | 17.04.2019 |
SB2016050501 SB2017032807 SB2016050502 and 5 more |
||
| #VU18290 - Improper input validation CVE-2018-1000654 |
CWE-20 | Low | 4.12-r4, 4.14-r0 | 17.04.2019 |
SB2018082017 SB2019060302 SB2019060502 and 6 more |
||
| #VU10323 - Resource exhaustion CVE-2018-6003 |
CWE-400 | Low | 4.8-r3 | 29.01.2018 |
SB2018012517 SB2018020711 SB2018022327 and 3 more |
||
| #VU10322 - NULL Pointer Dereference CVE-2017-10790 |
CWE-476 | Low | 4.7-r3 | 29.01.2018 |
SB2018012517 SB2018020711 SB2017101312 and 3 more |
||
| #VU7690 - Out-of-bounds read CVE-2015-3622 |
CWE-125 | Low | 3.6-r1, 3.6-r2 | 03.08.2017 |
SB2017080111 SB2015051101 SB2015050801 and 6 more |
||
| #VU6890 - Stack-based buffer overflow CVE-2017-6891 |
CWE-121 | Medium | 4.7-r2 | 02.06.2017 |
SB2017060222 SB2017060224 SB2017060611 and 11 more |
||
| #VU1590 - Stack-based buffer overflow CVE-2015-2806 |
CWE-121 | Low | 3.6-r1 | 21.12.2016 |
SB2017080111 SB2015040801 SB2015040301 and 8 more |
||
| #VU32528 - Improper input validation CVE-2014-3469 |
CWE-20 | Medium | 2.14-r1 | 05.06.2014 |
SB2014060507 SB2014060903 SB2014072402 and 7 more |
||
| #VU33843 - Improper input validation CVE-2014-3467 |
CWE-20 | Medium | 2.14-r1 | 05.06.2014 |
SB2014060510 SB2014060901 SB2014072402 and 7 more |
||
| #VU33844 - Improper input validation CVE-2014-3468 |
CWE-20 | Medium | 2.14-r1 | 05.06.2014 |
SB2014060511 SB2014060902 SB2014072402 and 7 more |