Known vulnerabilities in php (Alpine package) - page 2

Vendor: Alpine Linux Development Team
Software: php (Alpine package)
Software CPE: cpe:2.3:o:alpine:php_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 41
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting php (Alpine package) php (Alpine package) is affected by 41 known vulnerabilities: 2 critical, 13 high, 13 medium, 13 low Critical High Medium Low

Vulnerabilities (41)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU16095 - Type confusion
CVE-2014-4721		 CWE-843 Low
No
No
 5.3.28-r6 27.11.2018 SB2015070903
SB2014071704
#VU16086 - Heap-based Buffer Overflow
CVE-2014-4049		 CWE-122 High
No
No
 5.3.28-r5 27.11.2018 SB2015062304
SB2014062308
SB2014070709
and 9 more
#VU16085 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2014-0238		 CWE-835 Low
No
No
 5.3.28-r4 27.11.2018 SB2015062304
SB2014061501
SB2014061502
and 6 more
#VU16084 - Permissions, Privileges, and Access Controls
CVE-2014-0237		 CWE-264 Low
No
No
 5.3.28-r4 27.11.2018 SB2015062304
SB2014061501
SB2014061502
and 6 more
#VU16083 - Permissions, Privileges, and Access Controls
CVE-2014-0185		 CWE-264 Low
No
No
 5.3.28-r3 27.11.2018 SB2015062304
SB2014061001
SB2014052805
and 1 more
#VU16079 - NULL Pointer Dereference
CVE-2013-7327		 CWE-476 Low
No
No
 5.5.11-r0 27.11.2018 SB2015030301
SB2014032502
SB2014041717
and 1 more
#VU16077 - Buffer over-read
CVE-2013-6712		 CWE-126 Low
No
No
 5.3.28-r1 27.11.2018 SB2015121201
SB2014020519
SB2014082105
and 1 more
#VU16076 - Memory corruption
CVE-2013-6420		 CWE-119 High
Available
No
 5.3.28-r0 27.11.2018 SB2015121201
SB2013121703
SB2013121704
and 7 more
#VU16074 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2013-4248		 CWE-300 Low
No
No
 5.4.19-r0 27.11.2018 SB2015090501
SB2013083001
SB2013083004
and 4 more
#VU4201 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2012-1823		 CWE-78 Critical
Available
Exploited
 5.3.12-r0 11.01.2017 SB2012050301
SB2015050401
SB2012050901
and 11 more
#VU4197 - Heap-based Buffer Overflow
CVE-2012-2688		 CWE-122 Critical
No
No
 5.3.15-r0, 5.3.15-r1 11.01.2017 SB2012071901
SB2012072301
SB2012080501
and 4 more
#VU32500 - Improper input validation
CVE-2014-3538		 CWE-20 Medium
No
No
 5.5.16-r0 03.07.2014 SB2014070302
SB2014072101
SB2014072102
and 2 more
#VU32548 - Permissions, Privileges, and Access Controls
CVE-2013-7345		 CWE-264 Medium
No
No
 5.3.28-r2 24.03.2014 SB2014032402
SB2014041813
SB2014072304
and 8 more
#VU32631 - Memory corruption
CVE-2013-4113		 CWE-119 Medium
No
No
 5.3.26-r1, 5.3.27-r0 13.07.2013 SB2013071301
SB2013071603
SB2013080902
and 8 more
#VU32704 - Permissions, Privileges, and Access Controls
CVE-2013-1635		 CWE-264 Medium
No
No
 5.3.23-r0 06.03.2013 SB2013030601
SB2013041103
SB2013080902
and 5 more
#VU32705 - Exposure of sensitive information to an unauthorized actor
CVE-2013-1643		 CWE-200 Medium
No
No
 5.3.23-r0 06.03.2013 SB2013030602
SB2013041104
SB2013080902
and 5 more
#VU32779 - Permissions, Privileges, and Access Controls
CVE-2012-3365		 CWE-264 Medium
No
No
 5.3.15-r0, 5.3.15-r1 20.07.2012 SB2012072001
SB2012072522
SB2012082401
and 2 more
#VU33324 - Resource Management Errors
CVE-2012-0830		 CWE-399 Medium
Available
No
 5.3.10-r0 06.02.2012 SB2012020602
SB2012020301
SB2012020209
and 3 more
#VU32831 - Improper input validation
CVE-2011-4885		 CWE-20 Medium
Available
No
 5.3.8-r1, 5.3.8-r2 30.12.2011 SB2011123002
SB2012011004
SB2012020209
and 2 more
#VU33696 - Improper input validation
CVE-2011-4566		 CWE-20 Medium
No
No
 5.3.9-r0 29.11.2011 SB2011112901
SB2012011706
SB2012011911
and 1 more


Showing elements 21 - 40 out of 41