Known vulnerabilities in varnish (Alpine package)
Vendor:
Alpine Linux Development Team
Software:
varnish (Alpine package)
Software CPE:
cpe:2.3:o:alpine:varnish_alpine_package:*:*:*:*:*:alpine_linux:*:*
Website:
https://alpinelinux.org/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
7.2
Breakdown by Severity Chart
3.0.5-r1
4.0.0-r0
4.0.2-r1
4.0.3-r0
4.1.9-r0
4.1.2-r2
4.1.2-r1
4.1.2-r4
4.1.2-r3
4.1.3-r1
5.2.0-r0
5.1.2-r1
4.1.3-r0
6.2.0-r1
3.0.3-r0
3.0.4-r4
3.0.5-r0
6.0.2-r0
6.0.4-r0
6.1.1-r0
6.1.0-r0
6.0.1-r0
6.0.0-r1
6.0.0-r0
6.2.0-r0
6.3.1-r0
6.3.1-r1
6.3.0-r0
6.3.2-r0
4.1.2-r0
4.1.1-r0
4.1.0-r2
4.1.0-r0
4.1.0-r1
5.1.2-r0
5.1.3-r0
5.2.1-r0
6.2.1-r0
6.5.1-r0
6.6.0-r0
6.4.0-r0
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU20865 - Integer overflow CVE-2017-12425 |
CWE-190 | Medium | 4.1.2-r2 | 04.09.2019 |
SB2017080404 SB2017081035 SB20170807103 and 4 more |
||
| #VU20864 - Missing release of memory after effective lifetime CVE-2017-8807 |
CWE-401 | Medium | 4.1.9-r0 | 04.09.2019 |
SB2017111615 SB2017112601 SB2017112140 and 3 more |
||
| #VU20863 - Reachable Assertion CVE-2019-15892 |
CWE-617 | Low | 6.0.4-r0 | 04.09.2019 |
SB2019090422 SB2019090603 SB2019092507 and 9 more |
||
| #VU32597 - Memory corruption CVE-2013-4484 |
CWE-119 | Medium | 3.0.5-r0 | 01.11.2013 |
SB2013110101 SB2013121307 SB2013112015 and 1 more |