In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HAlpinelinux Apk Tools
OSAlpinelinux< 2.10.62.12.0 – 2.12.5 (excl.)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
Related vulnerabilities
CVE-2022-22704CRITICAL9.8PL ✓same vendor
Privilege escalation do root w zabbix-agent2 na Alpine Linux
CVE-2019-5021CRITICAL9.8PL ✓same vendor
Puste hasło root w oficjalnych obrazach Docker Alpine Linux
CVE-2018-1000849HIGH8.8same vendor
Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk...
CVE-2017-9671HIGH7.8same vendor
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service,...
CVE-2017-9669HIGH7.8same vendor
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service,...