Known vulnerabilities in qemu (Alpine package) - page 2

Vendor: Alpine Linux Development Team
Software: qemu (Alpine package)
Software CPE: cpe:2.3:o:alpine:qemu_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website: https://alpinelinux.org/
Total vulnerabilities: 45
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting qemu (Alpine package) qemu (Alpine package) is affected by 45 known vulnerabilities: 1 critical, 4 high, 26 medium, 14 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU33997 - Heap-based Buffer Overflow
CVE-2015-5279		 CWE-122 Medium
No
No
 1.6.2-r6 05.08.2020 SB2015110603
SB2015100612
SB2015092646
and 2 more
#VU33992 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2015-6815		 CWE-835 Medium
No
No
 1.6.2-r6 05.08.2020 SB2015110603
SB2015100613
SB2015092646
and 2 more
#VU33991 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2015-5278		 CWE-835 Medium
No
No
 1.6.2-r6 05.08.2020 SB2015110603
SB2015100611
SB2015092646
and 2 more
#VU33990 - Memory corruption
CVE-2015-5225		 CWE-119 Medium
No
No
 2.1.3-r3 05.08.2020 SB2015110603
SB2015100609
SB2015090105
and 3 more
#VU5580 - Memory corruption
CVE-2015-3456		 CWE-119 Critical
Available
No
 1.4.2-r2 01.02.2017 SB2015050601
SB2015051401
SB2015092603
and 24 more
#VU32135 - Resource Management Errors
CVE-2016-8910		 CWE-399 Low
No
No
 2.8.1-r1 04.11.2016 SB2016110408
SB2017041815
SB2016103001
and 2 more
#VU32134 - Improper input validation
CVE-2016-8909		 CWE-20 Medium
No
No
 2.8.1-r1 04.11.2016 SB2016110407
SB2017041814
#VU32133 - Out-of-bounds read
CVE-2016-8668		 CWE-125 Low
No
No
 2.8.1-r1 04.11.2016 SB2016110406
SB2017041813
#VU32132 - NULL Pointer Dereference
CVE-2016-8578		 CWE-476 Medium
No
No
 2.8.1-r1 04.11.2016 SB2016110405
SB2017041812
SB2016103001
and 2 more
#VU32131 - Missing release of memory after effective lifetime
CVE-2016-8577		 CWE-401 Medium
No
No
 2.8.1-r1 04.11.2016 SB2016110404
SB2017041811
SB2016103001
and 2 more
#VU32130 - Resource Management Errors
CVE-2016-8576		 CWE-399 Low
No
No
 2.8.1-r1 04.11.2016 SB2016110403
SB2017041810
SB2016103001
and 2 more
#VU32330 - Improper Access Control
CVE-2015-8550		 CWE-284 Low
Available
No
 2.4.0.1-r1 14.04.2016 SB2016041401
SB2016022411
SB2016022412
and 1 more
#VU32432 - Resource Management Errors
CVE-2015-1779		 CWE-399 High
No
No
 2.1.2-r1 12.01.2016 SB2016011208
SB2015051805
SB2015051312
and 3 more
#VU33813 - Improper input validation
CVE-2015-4037		 CWE-20 Low
No
No
 1.6.2-r5 26.08.2015 SB2015082605
SB2015090904
SB2015062604
and 3 more
#VU32393 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5165		 CWE-200 Medium
No
No
 1.6.2-r6 12.08.2015 SB2015081204
SB2015082107
SB2015100610
and 12 more
#VU32399 - Heap-based Buffer Overflow
CVE-2015-5154		 CWE-122 High
No
No
 2.1.3-r2 12.08.2015 SB2015081205
SB2015090103
SB2015083101
and 19 more
#VU32424 - Resource Management Errors
CVE-2014-9718		 CWE-399 Low
No
No
 2.1.3-r0 21.04.2015 SB2015042102
SB2015052019
#VU33056 - Heap-based Buffer Overflow
CVE-2014-8106		 CWE-122 Medium
No
No
 1.6.2-r4 08.12.2014 SB2014120835
SB2015012902
SB2015012903
and 2 more
#VU33063 - Command injection
CVE-2014-8990		 CWE-77 Medium
No
No
 1.6.2-r4, 2.1.2-r1, 2.1.2-r2, 2.5.0-r0 05.12.2014 SB2017011016
SB2017011019
SB2015012304
and 7 more
#VU32487 - Memory corruption
CVE-2014-5263		 CWE-119 Medium
No
No
 1.6.2-r1 26.08.2014 SB2014082601
SB2014102103


Showing elements 21 - 40 out of 45