alpine project records
5 published records for vendor alpine project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-287 Improper Authentication1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAll records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2020-14929No exploit | Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which isalpine project · alpine | High7.5 | — | 1.8% | Jun 19, 2020 |
30Monitor | CVE-2022-23553No exploit | URL access filters bypass in Alpinealpine project · alpine · CWE-863 | High7.5 | — | 0.9% | Dec 28, 2022 |
23Monitor | CVE-2021-38370No exploit | In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.alpine project · alpine · CWE-77 | Medium5.9 | — | 1.5% | Aug 10, 2021 |
23Monitor | CVE-2021-46853No exploit | Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.alpine project · alpine · CWE-367 | Medium5.9 | — | 1.1% | Nov 3, 2022 |
21Monitor | CVE-2022-23554No exploit | Authentication bypass in Alpinealpine project · alpine · CWE-287 | Medium5.4 | — | 0.7% | Dec 28, 2022 |
- CVE-2020-1492931Monitor
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is
HighCVSS 7.5No exploitEPSS 1%alpine project · alpineJun 19, 2020
- CVE-2022-2355330Monitor
URL access filters bypass in Alpine
HighCVSS 7.5No exploitEPSS 0%alpine project · alpineDec 28, 2022
- CVE-2021-3837023Monitor
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
MediumCVSS 5.9No exploitEPSS 1%alpine project · alpineAug 10, 2021
- CVE-2021-4685323Monitor
Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.
MediumCVSS 5.9No exploitEPSS 1%alpine project · alpineNov 3, 2022
- CVE-2022-2355421Monitor
Authentication bypass in Alpine
MediumCVSS 5.4No exploitEPSS 0%alpine project · alpineDec 28, 2022