ALPINE-CVE-2025-31160

Source
https://security.alpinelinux.org/vuln/CVE-2025-31160
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/alpine/ALPINE-CVE-2025-31160.json
JSON Data
https://api.test.osv.dev/v1/vulns/ALPINE-CVE-2025-31160
Upstream
Published
2025-03-26T21:15:23.323Z
Modified
2025-11-14T04:28:18.130433Z
Severity
  • 2.9 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

atop through 2.11.0 allows local users to cause a denial of service (e.g., assertion failure and application exit) or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop.

References

Affected packages

Alpine:v3.21 / atop

Package

Name
atop
Purl
pkg:apk/alpine/atop?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.11.1-r0

Affected versions

1.*

1.24-r0
1.24-r1
1.24-r2
1.25-r0
1.26-r0
1.27_p3-r0

2.*

2.0_p1-r0
2.0.2-r0
2.0.2-r1
2.0.2-r2
2.0.2-r3
2.1_p1-r0
2.1_p1-r1
2.1_p1-r2
2.1_p1-r3
2.1_p1-r4
2.2_p3-r0
2.3.0-r0
2.3.0-r1
2.3.0-r2
2.4.0-r0
2.5.0-r0
2.6.0-r0
2.7.0-r0
2.7.1-r0
2.7.1-r1
2.8.0-r0
2.8.1-r0
2.8.1-r1
2.8.1-r2
2.9.0-r0
2.9.0-r1
2.9.0-r2
2.10.0-r0
2.11.0-r0

Alpine:v3.22 / atop

Package

Name
atop
Purl
pkg:apk/alpine/atop?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.11.1-r0

Affected versions

1.*

1.24-r0
1.24-r1
1.24-r2
1.25-r0
1.26-r0
1.27_p3-r0

2.*

2.0_p1-r0
2.0.2-r0
2.0.2-r1
2.0.2-r2
2.0.2-r3
2.1_p1-r0
2.1_p1-r1
2.1_p1-r2
2.1_p1-r3
2.1_p1-r4
2.2_p3-r0
2.3.0-r0
2.3.0-r1
2.3.0-r2
2.4.0-r0
2.5.0-r0
2.6.0-r0
2.7.0-r0
2.7.1-r0
2.7.1-r1
2.8.0-r0
2.8.1-r0
2.8.1-r1
2.8.1-r2
2.9.0-r0
2.9.0-r1
2.9.0-r2
2.10.0-r0
2.11.0-r0