Known vulnerabilities in mbedtls (Alpine package)

Vendor: Alpine Linux Development Team
Software: mbedtls (Alpine package)
Software CPE: cpe:2.3:o:alpine:mbedtls_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mbedtls (Alpine package) mbedtls (Alpine package) is affected by 12 known vulnerabilities: 4 high, 2 medium, 6 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU46187 - Cryptographic Issues
CVE-2020-16150		 CWE-310 Low
No
No
 2.16.8-r0 01.09.2020 SB2020090123
SB2020092807
SB2021010806
and 6 more
#VU29653 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-10932		 CWE-327 Low
No
No
 2.16.6-r0 12.07.2020 SB2020041627
SB2020072922
SB2020052524
and 5 more
#VU26020 - Cryptographic Issues
CVE-2019-18222		 CWE-310 Low
No
No
 2.16.5-r0 11.03.2020 SB2020012313
SB2020031140
SB2020040424
and 5 more
#VU31909 - Exposure of sensitive information to an unauthorized actor
CVE-2019-16910		 CWE-200 Medium
No
No
 2.16.3-r0, 2.16.5-r0 26.09.2019 SB2020040423
SB2019092816
SB2019092817
and 4 more
#VU16220 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-19608		 CWE-300 Medium
No
No
 2.14.1-r0 04.12.2018 SB2018120401
SB2018122512
SB2018120750
and 3 more
#VU14174 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0497		 CWE-200 Low
No
No
 2.7.5-r0 02.08.2018 SB2018080208
SB2018091801
SB2020020801
and 4 more
#VU14173 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0498		 CWE-200 Low
No
No
 2.7.5-r0 02.08.2018 SB2018080208
SB2018091801
SB2020020801
and 1 more
#VU11120 - Integer overflow
CVE-2017-18187		 CWE-190 Low
No
No
 2.7.0-r0 15.03.2018 SB2018031515
SB2018032104
SB2018042302
and 6 more
#VU10955 - Buffer overflow
CVE-2018-0487		 CWE-120 High
No
No
 2.7.0-r0 13.03.2018 SB2018020130
SB2018031515
SB2018032104
and 7 more
#VU10943 - Improper input validation
CVE-2018-0488		 CWE-20 High
No
No
 2.7.0-r0 13.03.2018 SB2018020511
SB2018031515
SB2018032104
and 7 more
#VU32073 - Improper Authentication
CVE-2017-14032		 CWE-287 High
No
No
 2.6.0-r0 30.08.2017 SB2017083009
SB2017083136
SB2017082918
and 3 more
#VU32141 - Improper Certificate Validation
CVE-2017-2784		 CWE-295 High
No
No
 2.4.2-r0 20.04.2017 SB2017042011
SB2017032208
SB2017032209
and 9 more