alpine_linux Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/alpine_linux/ Sun, 26 Feb 2023 06:44:41 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png alpine_linux Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/alpine_linux/ 32 32 CVE-2018-1000849 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-1000849/ Sun, 26 Feb 2023 06:44:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-1000849/ Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux’ package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data to an attacker-specified file, due to bugs in handling long […]

The post CVE-2018-1000849 appeared first on CVE Vulnerability.

]]> Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux’ package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data to an attacker-specified file, due to bugs in handling long link target name and the way a regular file is extracted.. This vulnerability appears to have been fixed in 2.6.10, 2.7.6, and 2.10.1.

The post CVE-2018-1000849 appeared first on CVE Vulnerability.

]]> CVE-2019-5021 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-5021/ Sun, 26 Feb 2023 06:33:31 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-5021/ Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or […]

The post CVE-2019-5021 appeared first on CVE Vulnerability.

]]> Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL password for the `root` user.

The post CVE-2019-5021 appeared first on CVE Vulnerability.

]]> CVE-2022-22704 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-22704/ Thu, 23 Feb 2023 05:02:53 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-22704/ The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.

The post CVE-2022-22704 appeared first on CVE Vulnerability.

]]> The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.

The post CVE-2022-22704 appeared first on CVE Vulnerability.

]]>