ALPINE-CVE-2021-20314

See a problem?
Please try reporting it to the source first.

Source

https://security.alpinelinux.org/vuln/CVE-2021-20314

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json

JSON Data

https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2021-20314

Upstream

CVE-2021-20314

Published

2021-08-12T15:15:07.657Z

Modified

2025-12-03T22:47:30.360142Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Stack buffer overflow in libspf2 versions below 1.2.11 when processing certain SPF macros can lead to Denial of service and potentially code execution via malicious crafted SPF explanation messages.

References

https://security.alpinelinux.org/vuln/CVE-2021-20314

Affected packages

Alpine:v3.11

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.12

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.13

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.14

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.15

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.16

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.17

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.18

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.19

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.20

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.21

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r4

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

1.2.10-r5

1.2.10-r6

1.2.10-r7

1.2.11-r1

1.2.11-r2

1.2.11-r3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.22

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r4

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

1.2.10-r5

1.2.10-r6

1.2.10-r7

1.2.11-r1

1.2.11-r2

1.2.11-r3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

Alpine:v3.23

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.10-r5

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"

libspf2

Package

Name: libspf2
Purl: pkg:apk/alpine/libspf2?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.2.11-r4

Affected versions

1.*

1.2.9-r0

1.2.9-r1

1.2.9-r2

1.2.9-r3

1.2.9-r4

1.2.9-r5

1.2.9-r6

1.2.9-r7

1.2.9-r8

1.2.10-r0

1.2.10-r1

1.2.10-r2

1.2.10-r3

1.2.10-r4

1.2.10-r5

1.2.10-r6

1.2.10-r7

1.2.11-r1

1.2.11-r2

1.2.11-r3

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2021-20314.json"