Known vulnerabilities in patch (Alpine package)

Vendor: Alpine Linux Development Team
Software: patch (Alpine package)
Software CPE: cpe:2.3:o:alpine:patch_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting patch (Alpine package) patch (Alpine package) is affected by 7 known vulnerabilities: 2 high, 1 medium, 4 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU20411 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-20969		 CWE-78 High
No
No
 2.7.6-r6 27.08.2019 SB2019091721
SB2019100311
SB2019102601
and 4 more
#VU19504 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-13638		 CWE-78 Low
No
No
 2.7.6-r0 28.07.2019 SB2019072704
SB2019081805
SB2019091721
and 7 more
#VU19283 - Improper Link Resolution Before File Access ('Link Following')
CVE-2019-13636		 CWE-59 Low
No
No
 2.7.5-r3, 2.7.6-r3 22.07.2019 SB2019072208
SB2019072704
SB2019081805
and 5 more
#VU18323 - Double Free
CVE-2018-6952		 CWE-415 Medium
No
No
 2.7.6-r0 19.04.2019 SB2019041707
SB2018100933
SB2019080709
and 8 more
#VU11646 - Improper input validation
CVE-2018-1000156		 CWE-20 High
No
No
 2.7.6-r0 07.04.2018 SB2018040701
SB2018042425
SB2018042426
and 20 more
#VU11177 - NULL Pointer Dereference
CVE-2018-6951		 CWE-476 Low
No
No
 2.7.5-r2, 2.7.6-r2 20.03.2018 SB2018021333
SB2018050213
SB2018050302
and 7 more
#VU10656 - Memory corruption
CVE-2016-10713		 CWE-119 Low
No
No
 2.7.5-r3 19.02.2018 SB2018021515
SB2018050213
SB2018050302
and 5 more