CRITICAL9.1CVE-2021-36159libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols.
from 0, < 2.10.7-r0
HIGH7.8CVE-2017-9671A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution, b…
from 0, < 2.7.2-r0
HIGH7.8CVE-2017-9669A heap overflow in apk (Alpine Linux's package manager) allows a remote attacker to cause a denial of service, or achieve code execution by…
from 0, < 2.7.2-r0
HIGH7.5In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash.