Known vulnerabilities in openldap (Alpine package)
Vendor:
Alpine Linux Development Team
Software:
openldap (Alpine package)
Software CPE:
cpe:2.3:o:alpine:openldap_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website:
https://alpinelinux.org/
Total vulnerabilities:
17
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
2.4.19-r1
2.4.19-r5
2.4.33-r0
2.4.40-r5
2.4.25-r3
2.4.23-r1
2.4.28-r0
2.4.38-r2
2.4.40-r2
2.4.42-r1
2.4.42-r0
2.4.41-r0
2.4.44-r0
2.4.44-r2
2.4.44-r1
2.4.44-r3
2.4.45-r0
2.4.44-r4
2.4.47-r3
2.4.49-r3
2.4.49-r1
2.4.49-r2
2.4.48-r4
2.4.49-r0
2.4.24-r1
2.4.24-r2
2.4.24-r0
2.4.25-r2
2.4.26-r3
2.4.26-r4
2.4.25-r1
2.4.26-r2
2.4.35-r2
2.4.35-r3
2.4.35-r1
2.4.38-r1
2.4.39-r2
2.4.38-r0
2.4.39-r1
2.4.40-r3
2.4.40-r4
2.4.39-r0
2.4.40-r1
2.4.48-r1
2.4.45-r3
2.4.45-r4
2.4.47-r2
2.4.46-r2
2.4.46-r1
2.4.51-r0
2.4.52-r0
2.4.54-r0
2.4.43-r0
2.4.45-r2
2.4.45-r1
2.4.48-r2
2.4.48-r3
2.4.50-r1
2.4.48-r0
2.4.44-r5
2.4.56-r0
2.4.46-r0
2.4.50-r2
2.4.57-r0
2.4.57-r1
2.4.58-r0
2.4.50-r0
Vulnerabilities (17)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU50779 - Reachable Assertion CVE-2021-27212 |
CWE-617 | Medium | 2.4.50-r2, 2.4.57-r1 | 17.02.2021 |
SB2021021717 SB2021022225 SB2021022613 and 13 more |
||
| #VU50389 - Integer underflow CVE-2020-36221 |
CWE-191 | Medium | 2.4.57-r0 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021011828 and 15 more |
||
| #VU50390 - Reachable Assertion CVE-2020-36222 |
CWE-617 | Medium | 2.4.57-r0 | 26.01.2021 |
SB2021020601 SB2021020602 SB2021011829 and 14 more |
||
| #VU48516 - Reachable Assertion CVE-2020-25709 |
CWE-617 | Medium | - | 18.11.2020 |
SB2020111801 SB2020111802 SB2020103044 and 16 more |
||
| #VU48515 - Reachable Assertion CVE-2020-25710 |
CWE-617 | Medium | - | 17.11.2020 |
SB2020111801 SB2020111802 SB2020103045 and 15 more |
||
| #VU48143 - NULL Pointer Dereference CVE-2020-25692 |
CWE-476 | Medium | 2.4.48-r2 | 04.11.2020 |
SB2020110407 SB2020110408 SB2020121028 and 10 more |
||
| #VU27445 - Resource Management Errors CVE-2020-12243 |
CWE-399 | Medium | 2.4.48-r1, 2.4.48-r2 | 29.04.2020 |
SB2020042921 SB2020043001 SB2020050624 and 10 more |
||
| #VU19562 - Improper Authorization CVE-2019-13565 |
CWE-285 | Low | 2.4.48-r0, 2.4.48-r2 | 30.07.2019 |
SB2019073001 SB2019092405 SB2019092417 and 5 more |
||
| #VU19561 - Improper Authorization CVE-2019-13057 |
CWE-285 | Low | 2.4.48-r0, 2.4.48-r2 | 30.07.2019 |
SB2019073001 SB2019092405 SB2019092417 and 2 more |
||
| #VU16671 - Stack-based buffer overflow CVE-2017-17740 |
CWE-121 | Low | 2.4.46-r0 | 24.12.2018 |
SB2019092405 SB2019092417 SB2018051303 and 1 more |
||
| #VU31918 - Improper Initialization CVE-2017-14159 |
CWE-665 | Medium | 2.4.46-r0 | 05.09.2017 |
SB2018051302 SB2024101547 |
||
| #VU6842 - Double Free CVE-2017-9287 |
CWE-415 | Low | 2.4.44-r1, 2.4.44-r2 | 31.05.2017 |
SB2017053105 SB2017060212 SB2017060219 and 4 more |
||
| #VU33285 - Improper input validation CVE-2015-6908 |
CWE-20 | Medium | 2.4.35-r3 | 11.09.2015 |
SB2015091102 SB2016012721 SB2016012506 and 2 more |
||
| #VU33292 - Improper input validation CVE-2015-1546 |
CWE-20 | Medium | 2.4.35-r2, 2.4.38-r1, 2.4.39-r1, 2.4.40-r1 | 12.02.2015 |
SB2015021203 SB2015060506 SB2015060511 and 2 more |
||
| #VU32435 - Improper input validation CVE-2015-1545 |
CWE-20 | Medium | 2.4.35-r2, 2.4.38-r1, 2.4.39-r1, 2.4.40-r1 | 12.02.2015 |
SB2015021201 SB2015060504 SB2015060509 and 3 more |
||
| #VU32774 - Memory corruption CVE-2012-1164 |
CWE-119 | Low | 2.4.24-r2 | 29.06.2012 |
SB2012062901 SB2012081516 SB2012070504 |
||
| #VU33332 - Heap-based Buffer Overflow CVE-2011-4079 |
CWE-122 | Low | 2.4.24-r1 | 27.10.2011 |
SB2011102701 SB2011112202 |