Remote Code Execution in Alpine Linux

guest · Sep 14, 2018

Remote Code Execution in Alpine Linux
September 13, 2018
https://justi.cz/security/2018/09/13/alpine-apk-rce.html

I found several bugs in apk, the default package manager for Alpine Linux. Alpine is a really lightweight distro that is very commonly used with Docker. The worst of these bugs, the subject of this blog post, allows a network man-in-the-middle (or a malicious package mirror) to execute arbitrary code on the user’s machine.

This is especially bad because packages aren’t served over TLS when using the default repositories. This bug has been fixed and the Alpine base images have been updated – you may want to rebuild your Alpine-derived images!
Arbitrary file creation leading to RCE [...]
Click to expand...

Log in or Sign up

Remote Code Execution in Alpine Linux

guest Guest

Log in or Sign up

Remote Code Execution in Alpine Linux

guest Guest

Useful Searches