CVE-2017-9671
HighSummary
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service or achieve code execution by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
Risk Assessment
The organization may be exposed to remote attacks that could lead to system downtime or unauthorized code execution, potentially resulting in data loss or security breaches.
Recommendation
It is recommended to update the apk package manager to the latest version to mitigate this vulnerability and to monitor systems for suspicious APKINDEX.tar.gz files.
Other vulnerabilities in apk (menedżer pakietów Alpine Linux)
Original NVD description (English source)
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS