CVE-2017-9671

2017-07-1721:29:00

Alpine Linux Development Team

security.alpinelinux.org

0.024 Low

EPSS

Percentile

89.9%

JSON

A heap overflow in apk (Alpine Linux’s package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.

OSVersionArchitecturePackageVersionFilename
Alpine3.10-mainnoarchapk-tools< 2.7.2-r0UNKNOWN
Alpine3.11-mainnoarchapk-tools< 2.7.2-r0UNKNOWN
Alpine3.12-mainnoarchapk-tools< 2.7.2-r0UNKNOWN
Alpine3.13-mainnoarchapk-tools< 2.7.2-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	3.10-main	noarch	apk-tools	< 2.7.2-r0	UNKNOWN
Alpine	3.11-main	noarch	apk-tools	< 2.7.2-r0	UNKNOWN
Alpine	3.12-main	noarch	apk-tools	< 2.7.2-r0	UNKNOWN
Alpine	3.13-main	noarch	apk-tools	< 2.7.2-r0	UNKNOWN

0.024 Low

EPSS

Percentile

89.9%

JSON

Related for ALPINE:CVE-2017-9671