USN-7360-1

Dashboard / Vulnerabilities / USN-7360-1

USN-7360-1

Summary: alpine vulnerabilities

Details: It was discovered that Alpine did not use a secure connection under certain circumstances. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2020-14929) It was discovered that Alpine could allow untagged responses from an IMAP server before upgrading to a TLS connection. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2021-38370) It was discovered that Alpine could crash when receiving certain SMTP commands. A remote attacker could possibly use this issue to cause a denial of service. (CVE-2021-46853)

References: https://ubuntu.com/security/notices/USN-7360-1, https://ubuntu.com/security/CVE-2020-14929, https://ubuntu.com/security/CVE-2021-38370, https://ubuntu.com/security/CVE-2021-46853