CVE-2017-9671

A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
References
Configurations

Configuration 1 (hide)

cpe:2.3:o:alpinelinux:alpine_linux:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-07-17 21:29

Updated : 2024-02-04 19:29


NVD link : CVE-2017-9671

Mitre link : CVE-2017-9671

CVE.ORG link : CVE-2017-9671


JSON object : View

Products Affected

alpinelinux

  • alpine_linux
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer