apk Multiple Heap Buffer Overflow Vulnerabilities
BID:99340
CVE-2017-9669 | CVE-2017-9671 |Info
apk Multiple Heap Buffer Overflow Vulnerabilities
| Bugtraq ID: | 99340 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-9671 CVE-2017-9669 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 25 2017 12:00AM |
| Updated: | Jun 25 2017 12:00AM |
| Credit: | Ariel Zelivansky. |
| Vulnerable: |
Alpine Linux apk 2.5.0_rc1 |
| Not Vulnerable: | |
Discussion
apk Multiple Heap Buffer Overflow Vulnerabilities
apk is prone to multiple heap-based buffer-overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
apk 2.5.0_rc1 is vulnerable; other versions may also be affected.
apk is prone to multiple heap-based buffer-overflow vulnerabilities.
Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions.
apk 2.5.0_rc1 is vulnerable; other versions may also be affected.
Exploit / POC
apk Multiple Heap Buffer Overflow Vulnerabilities
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
Solution / Fix
apk Multiple Heap Buffer Overflow Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
apk Multiple Heap Buffer Overflow Vulnerabilities
References:
References:
- Alpine Linux Homepage (AlpineLinux)
- CVE-2017-9669 and CVE-2017-9671: Exploitable buffer overflows in apk (Alpine's p (Seclists)