Skip to content

PatchFirst · Latest vulnerabilities

alpine vulnerabilities

Vulnerabilities published for alpine in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerabilities: 3

CVE-2021-46853
Medium · CVSS 5.9EPSS 0.92%Fix available
CVE-2021-46853
Alpine before 2.25 allows remote attackers to cause a denial of service (application crash) when LIST or LSUB is sent before STARTTLS.
alpine Operating systems
- Update to 2.21+dfsg1-1ubuntu0.1~esm1
Published November 3, 2022Updated May 5, 2025
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2021-38370
Medium · CVSS 5.9EPSS 1.56%Fix available
CVE-2021-38370
In Alpine before 2.25, untagged responses from an IMAP server are accepted before STARTTLS.
alpine Operating systems
- Update to 2.21+dfsg1-1ubuntu0.1~esm1
Published August 10, 2021Updated August 4, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗
CVE-2020-14929
High · CVSS 7.5EPSS 1.82%Fix available
CVE-2020-14929
Alpine before 2.23 silently proceeds to use an insecure connection after a /tls is sent in certain circumstances involving PREAUTH, which is a less secure behavior than the alternative of closing the connection and letting the user decide what they would like to do.
alpine Operating systems
- Update to 2.21+dfsg1-1ubuntu0.1~esm1
Published June 19, 2020Updated August 4, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →