Known vulnerabilities in lighttpd (Alpine package)

Known vulnerabilities in lighttpd (Alpine package)

Vendor: Alpine Linux Development Team

Software: lighttpd (Alpine package)

Software CPE: cpe:2.3:o:alpine:lighttpd_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 11

Public exploits: 5

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (11)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU717 - Improper Access Control CVE-2015-3200	CWE-284	Low	No	No	1.4.35-r4	29.08.2016	SB2015070718 SB2016051111 SB2015072703 and 4 more
#VU32559 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2014-2323	CWE-89	Medium	Available	No	1.4.35-r0	14.03.2014	SB2014031402 SB2014031318 SB2014060306 and 4 more
#VU32560 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2014-2324	CWE-22	Medium	Available	No	1.4.35-r0	14.03.2014	SB2014031403 SB2014031319 SB2014060306 and 3 more
#VU32620 - Permissions, Privileges, and Access Controls CVE-2013-4559	CWE-264	High	No	No	1.4.33-r1	20.11.2013	SB2013112002 SB2013111503 SB2014030605 and 4 more
#VU32621 - Use After Free CVE-2013-4560	CWE-416	Low	No	No	1.4.33-r1	20.11.2013	SB2013112003 SB2013111504 SB2014030605 and 4 more
#VU32619 - Cryptographic Issues CVE-2013-4508	CWE-310	Medium	No	No	1.4.33-r1	08.11.2013	SB2013110801 SB2013111501 SB2014030605 and 4 more
#VU32618 - Improper input validation CVE-2012-5533	CWE-20	Medium	Available	No	1.4.33-r0	24.11.2012	SB2012112401 SB2013111502 SB2013041111 and 4 more
#VU33958 - Improper input validation CVE-2011-4362	CWE-20	Medium	Available	No	1.4.30-r0	24.12.2011	SB2011122401 SB2012010307 SB2012070902 and 3 more
#VU33691 - Improper input validation CVE-2011-3389	CWE-20	Medium	Available	No	1.4.30-r0	06.09.2011	SB2012010304 SB2012010305 SB2012010306 and 1 more
#VU33827 - Improper input validation CVE-2007-1869	CWE-20	Medium	No	No	1.4.35-r4	18.04.2007	SB2007041802 SB2015070716 SB2007050701
#VU32410 - NULL Pointer Dereference CVE-2007-1870	CWE-476	Medium	No	No	1.4.35-r4	18.04.2007	SB2007041801 SB2015070717 SB2007050701