Known vulnerabilities in openssl (Alpine package) 1.0.2h-r2-r0

Vendor: Alpine Linux Development Team
Software: openssl (Alpine package)
Version: 1.0.2h-r2-r0
Software CPE: cpe:2.3:o:alpine:openssl_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 18
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting openssl (Alpine package) version 1.0.2h-r2-r0 openssl (Alpine package) 1.0.2h-r2-r0 is affected by 18 vulnerabilities: 2 high, 3 medium, 13 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU23451 - Cryptographic Issues
CVE-2019-1551		 CWE-310 Low
No
No
 1.0.2u-r0, 1.1.1d-r2 08.12.2019 SB2019120802
SB2019122101
SB2019122807
and 24 more
#VU21045 - Cryptographic Issues
CVE-2019-1563		 CWE-310 Low
No
No
 1.0.2t-r0, 1.1.1d-r0 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 27 more
#VU21043 - Cryptographic Issues
CVE-2019-1547		 CWE-310 Low
No
No
 1.0.2t-r0, 1.1.1d-r0 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 39 more
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559		 CWE-327 Low
No
No
 1.0.2r-r0 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU13325 - Improper input validation
CVE-2018-0732		 CWE-20 Low
No
No
 1.0.2o-r1 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU11854 - Exposure of sensitive information to an unauthorized actor
CVE-2018-0737		 CWE-200 Low
No
No
 1.0.2o-r1 17.04.2018 SB2018041705
SB2018042001
SB2018070301
and 26 more
#VU9109 - Cryptographic Issues
CVE-2017-3736		 CWE-310 Low
No
No
 1.0.2m-r0, 1.0.2n-r0 02.11.2017 SB2017110221
SB2017110302
SB2017110401
and 34 more
#VU8487 - Out-of-bounds read
CVE-2017-3735		 CWE-125 Low
No
No
 1.0.2m-r0, 1.0.2n-r0 28.08.2017 SB2017082906
SB2017110401
SB2017110402
and 30 more
#VU5420 - Out-of-bounds read
CVE-2017-3731		 CWE-125 Medium
No
No
 1.0.2k-r0 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 16 more
#VU5442 - Cryptographic Issues
CVE-2017-3732		 CWE-310 Low
No
No
 1.0.2k-r0 27.01.2017 SB2017012701
SB2017022301
SB2017021407
and 25 more
#VU1968 - Out-of-bounds write
CVE-2016-2182		 CWE-787 High
No
No
 1.0.2h-r3 21.12.2016 SB2018021614
SB2016091935
SB2023022033
and 14 more
#VU817 - Resource exhaustion
CVE-2016-6307		 CWE-400 Low
No
No
 - 10.10.2016 SB2016092612
SB2016092236
SB2023030219
and 3 more
#VU642 - Buffer over-read
CVE-2016-2176		 CWE-126 Low
No
No
 1.0.2h-r3 23.09.2016 SB2016050507
SB2016091934
SB2016050404
and 2 more
#VU641 - Improper input validation
CVE-2016-2109		 CWE-119 Low
No
No
 1.0.2h-r3 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU640 - Improper input validation
CVE-2016-2105		 CWE-20 Low
No
No
 1.0.2h-r3 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Public exploit available
No
 1.0.2h-r3 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU33809 - Improper input validation
CVE-2016-2106		 CWE-20 Medium
No
No
 1.0.2h-r3 05.05.2016 SB2016050513
SB2016051903
SB2016051204
and 21 more
#VU32244 - Improper input validation
CVE-2016-0797		 CWE-20 Medium
No
No
 1.0.2h-r3 03.03.2016 SB2016030304
SB2016061413
SB2016091925
and 9 more