Known vulnerabilities in xen (Alpine package)

Software CPE: cpe:2.3:o:alpine:xen_alpine_package:*:*:*:*:*:alpine_linux:*:*
Total vulnerabilities: 253
Public exploits: 7
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting xen (Alpine package) xen (Alpine package) is affected by 253 known vulnerabilities: 1 critical, 13 high, 57 medium, 182 low Critical High Medium Low

Vulnerabilities (253)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49129 - Incorrect Permission Assignment for Critical Resource
CVE-2020-29479
CWE-732 Low
No
No
4.14.1-r0 15.12.2020 SB2020121534
SB2020122321
SB2020121572
and 2 more
#VU49130 - Improper input validation
CVE-2020-29480
CWE-20 Low
No
No
4.14.1-r0 15.12.2020 SB2020121535
SB2020122322
SB2020121572
and 2 more
#VU49131 - Improper input validation
CVE-2020-29481
CWE-20 Low
No
No
4.14.1-r0 15.12.2020 SB2020121536
SB2020122323
SB2020121572
and 2 more
#VU49132 - Untrusted Search Path
CVE-2020-29482
CWE-426 Low
No
No
4.14.1-r0 15.12.2020 SB2020121537
SB2020122324
SB2020121572
and 2 more
#VU49133 - Use After Free
CVE-2020-29483
CWE-416 Low
No
No
4.14.1-r0 15.12.2020 SB2020121538
SB2020122325
SB2020121572
and 2 more
#VU49134 - NULL Pointer Dereference
CVE-2020-29484
CWE-476 Medium
No
No
4.14.1-r0 15.12.2020 SB2020121539
SB2020122326
SB2020121572
and 2 more
#VU49135 - Missing release of memory after effective lifetime
CVE-2020-29485
CWE-401 Low
No
No
4.14.1-r0 15.12.2020 SB2020121540
SB2020122327
SB2020121572
and 2 more
#VU49136 - Allocation of Resources Without Limits or Throttling
CVE-2020-29486
CWE-770 Low
No
No
4.14.1-r0 15.12.2020 SB2020121541
SB2020122328
SB2020121572
and 2 more
#VU49137 - Uncontrolled Recursion
CVE-2020-29566
CWE-674 Low
No
No
4.14.1-r0 15.12.2020 SB2020121542
SB2020122329
SB2020121572
and 2 more
#VU49138 - Allocation of Resources Without Limits or Throttling
CVE-2020-29567
CWE-770 Medium
No
No
4.14.1-r0 15.12.2020 SB2020121543
SB2020122330
SB2020121633
#VU49139 - Allocation of Resources Without Limits or Throttling
CVE-2020-29570
CWE-770 Medium
No
No
4.14.1-r0 15.12.2020 SB2020121544
SB2020122331
SB2020121572
and 2 more
#VU49140 - NULL Pointer Dereference
CVE-2020-29571
CWE-476 Medium
No
No
4.14.1-r0 15.12.2020 SB2020121545
SB2020122332
SB2020121572
and 2 more
#VU49943 - Off-by-one Error
CVE-2020-29040
CWE-193 Low
No
No
- 24.11.2020 SB2020112439
SB2021012422
#VU48756 - Improper input validation
CVE-2020-28368
CWE-20 Low
No
No
- 10.11.2020 SB2020111082
SB2020120214
SB2020120511
and 3 more
#VU49940 - Insufficient Verification of Data Authenticity
CVE-2020-27670
CWE-345 Low
No
No
- 22.10.2020 SB2020102219
SB2021012418
SB2020120511
and 3 more
#VU49941 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27672
CWE-362 Low
No
No
- 22.10.2020 SB2020102220
SB2021012420
SB2020120511
and 3 more
#VU49942 - Memory corruption
CVE-2020-27674
CWE-119 Low
No
No
- 22.10.2020 SB2020102221
SB2021012421
SB2020120511
and 7 more
#VU48638 - Improper Privilege Management
CVE-2020-27671
CWE-269 Medium
No
No
- 22.10.2020 SB2021012419
SB2020120511
SB2020111136
and 2 more
#VU46980 - Resource Management Errors
CVE-2020-25603
CWE-399 Medium
No
No
4.14.0-r1 23.09.2020 SB2020092323
SB2020092341
SB2020100401
and 6 more
#VU46970 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-25604
CWE-362 Medium
No
No
4.14.0-r1 23.09.2020 SB2020092323
SB2020092342
SB2020100401
and 6 more


Showing elements 1 - 20 out of 253