ALPINE-CVE-2018-6758

See a problem?
Please try reporting it to the source first.

Source

https://security.alpinelinux.org/vuln/CVE-2018-6758

Import Source

https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json

JSON Data

https://api.osv.dev/v1/vulns/ALPINE-CVE-2018-6758

Upstream

CVE-2018-6758

Published

2018-02-06T18:29:00Z

Modified

2026-06-09T21:31:30Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

The uwsgi_expand_path function in core/utils.c in Unbit uWSGI through 2.0.15 has a stack-based buffer overflow via a large directory length.

References

https://security.alpinelinux.org/vuln/CVE-2018-6758

Affected packages

Alpine:v3.10

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.11

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.12

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.13

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.14

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.15

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.16

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.17

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.18

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.19

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.20

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.21

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.22

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.23

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.24

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.4

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.5

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.6

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.7

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.8

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"

Alpine:v3.9

uwsgi

Package

Name: uwsgi
Purl: pkg:apk/alpine/uwsgi?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.16-r0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/alpine/ALPINE-CVE-2018-6758.json"