[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqemQlbrwkhL7EtphZJ0lzXsdGkJ-d57FrewKEKz48LU":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":37,"kevVulnerabilities":84,"topProductsByCves":85,"seoMetadata":90,"meta":99},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":36},1390,"alpinelinux",4,8,0,450,"2022-01-06","a",[16,21,27,31],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},3655,"alpine_linux",124,5,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},3654,"abuild",94,1,"2019-06-18",{"id":28,"product_name":29,"version_count":11,"cve_count":25,"kev_count":11,"last_cve_update":30},3656,"apk-tools","2021-04-21",{"id":32,"product_name":33,"version_count":34,"cve_count":25,"kev_count":11,"last_cve_update":35},3657,"aports",232,"2021-07-05","Alpinelinux is a technology vendor with 4 tracked products and 8 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[38,47,55,61,64,69,73,79],{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":45,"epssScore":46},"CVE-2019-5021","Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL password for the `root` user.","2019-05-08",9.8,"v3.1","Critical",false,0.06263,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":45,"epssScore":54},"CVE-2018-1000849","Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other\u002FUnknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data to an attacker-specified file, due to bugs in handling long link target name and the way a regular file is extracted.. This vulnerability appears to have been fixed in 2.6.10, 2.7.6, and 2.10.1.","2018-12-20",8.8,"v3.0","High",0.03529,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":52,"severity":53,"isKev":45,"epssScore":60},"CVE-2017-9669","A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file.","2017-07-17",7.8,0.03234,{"cveId":62,"description":63,"publishedDate":58,"cvssScore":59,"cvssVersion":52,"severity":53,"isKev":45,"epssScore":60},"CVE-2017-9671","A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.",{"cveId":65,"description":66,"publishedDate":30,"cvssScore":67,"cvssVersion":43,"severity":53,"isKev":45,"epssScore":68},"CVE-2021-30139","In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.",7.5,0.01618,{"cveId":70,"description":71,"publishedDate":13,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":45,"epssScore":72},"CVE-2022-22704","The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would (in effect) determine part of the configuration.",0.01334,{"cveId":74,"description":75,"publishedDate":26,"cvssScore":76,"cvssVersion":52,"severity":77,"isKev":45,"epssScore":78},"CVE-2019-12875","Alpine Linux abuild through 3.4.0 allows an unprivileged member of the abuild group to add an untrusted package via a --keys-dir option that causes acceptance of an untrusted signing key.",6.5,"Medium",0.0126,{"cveId":80,"description":81,"publishedDate":35,"cvssScore":82,"cvssVersion":43,"severity":77,"isKev":45,"epssScore":83},"CVE-2021-36158","In the xrdp package (in branches through 3.14) for Alpine Linux, RDP sessions are vulnerable to man-in-the-middle attacks because pre-generated RSA certificates and private keys are used.",5.9,0.00348,[],[86,87,88,89],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":11,"cve_count":25,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":34,"cve_count":25,"kev_count":11,"last_cve_update":35},{"title":91,"metaDescription":92,"keywords":93,"structuredData":94},"Alpinelinux - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Alpinelinux covering 4 products with 8 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Alpinelinux vulnerabilities, Alpinelinux security, Alpinelinux CVE, Alpinelinux threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":95,"@type":96,"name":97,"description":92,"url":98},"https:\u002F\u002Fschema.org","Organization","Alpinelinux","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Falpinelinux",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":100,"apiVersion":101},"2026-10-18T17:50:56.873Z","3.0"]