CVE-2018-1000849

Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools Alpine Linux' package manager that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data ...

EUVD-2021-17076

Malware in sbrugna...

EUVD-2018-2037

Malware in sbrugna...

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

CVE-2021-36159

CVE-2021-36159 affects libfetch (used in apk-tools, xbps, and other products). The issue arises from mishandling numeric strings for FTP/HTTP protocols, where strtol is used to parse numbers into addresses. A premature line end can cause the loop to check the terminator one byte too late, enablin...

CVE-2021-36159: Out-of-bounds Read

libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the...

Denial Of Service (DoS)

apk-tools:edge is vulnerable to denial of service. The vulnerability occurs when numeric strings in the FTP and HTTP protocols are mishandled...

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

ALPINE-CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

Buffer overflow

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

CVE-2021-30139

CVE-2021-30139 affects Alpine Linux apk-tools prior to 2.12.5. The tarball parser contains a buffer overflow that can cause a crash (availability impact). Upgrading to apk-tools 2.12.5 or later is the documented remediation. This vulnerability is supported by multiple sources across OSV, NVD, Red...

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

CVE-2021-30139

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

Alpine Linux apk-tools 缓冲区错误漏洞

Alpine Linux is a lightweight Linux distribution for security applications. apk-tools is one of the shell-based package managers. A security vulnerability exists in Alpine Linux apk-tools versions prior to 2.12.5, which stems from a buffer overflow and crash allowed by the tarball parser...

CVE-2021-30139: Out-of-bounds Read

In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash...

Out-of-Bounds Read

apk-tools is vulnerable to out-of-bound read. The vulnerability exists due to insufficient sanity checks on tar entries...

CVE-2018-1000849

Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools Alpine Linux' package manager that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data ...

CVE-2018-1000849

Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools Alpine Linux' package manager that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to write arbitrary data ...