Apk Tools
by Alpinelinux
Source repositories
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-1000849 | Hig | 0.57 | 8.8 | 0.04 | Dec 20, 2018 | Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to… | ||
| CVE-2017-9671 | Hig | 0.51 | 7.8 | 0.03 | Jul 17, 2017 | A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block. | ||
| CVE-2021-30139 | Hig | 0.49 | 7.5 | 0.02 | Apr 21, 2021 | In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash. |
- risk 0.57cvss 8.8epss 0.04
Alpine Linux version Versions prior to 2.6.10, 2.7.6, and 2.10.1 contains a Other/Unknown vulnerability in apk-tools (Alpine Linux' package manager) that can result in Remote Code Execution. This attack appear to be exploitable via A specially crafted APK-file can cause apk to…
- risk 0.51cvss 7.8epss 0.03
A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, by crafting a malicious APKINDEX.tar.gz file with a bad pax header block.
- risk 0.49cvss 7.5epss 0.02
In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.