CVE-2017-9669

High

Published: 17/07/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service or achieve code execution by crafting a malicious APKINDEX.tar.gz file.

Risk Assessment

The organization may be exposed to remote attacks that could lead to system downtime or unauthorized code execution, jeopardizing the integrity and availability of services.

Recommendation

It is recommended to update the apk package manager to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in apk (menedżer pakietów Alpine Linux)

CVE-2017-9671High
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service or achieve code execution by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.

Original NVD description (English source)

A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by crafting a malicious APKINDEX.tar.gz file.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS