Alpinelinux vulnerabilitiesNone on the known-exploited list.
Alpinelinux has 8 published vulnerabilities across 4 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Alpine Linux, with 5. If you run Alpinelinux software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Alpinelinux products have the most vulnerabilities?
Alpine Linux leads with 5 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Alpinelinux vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Alpinelinux's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Alpinelinux flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 6.3%CVE-2019-5021Critical
Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user.
- 3.5%CVE-2018-1000849High
Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution.
- 3.2%CVE-2017-9669High
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file.
- 3.2%CVE-2017-9671High
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
- 1.6%CVE-2021-30139High
In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.
- 1.3%CVE-2022-22704Critical
The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.
- 1.3%CVE-2019-12875Medium
Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.
- 0.3%CVE-2021-36158Medium
In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used.
All Alpinelinux products we track.
3 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Alpine Linuxalpine_linux5 vulnerabilities124 versions
- Abuildabuild1 vulnerability94 versions
- Aportsaports1 vulnerability232 versions
This directory lists the 3 Alpinelinux products with at least one tracked version, of 4 in our catalogue.
Running Alpinelinux? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL password for the `root` user.
- Matched to
- Alpine Linux on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 8 published vulnerabilities across 4 products and 450 versions from Alpinelinux.
None of Alpinelinux's vulnerabilities is on the list of flaws known to be exploited today.
Alpine Linux, with 5 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Alpinelinux products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.