There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for
    the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because
    strtol is used to parse the relevant numbers into address bytes. It does not check if the line ends
    prematurely. If it does, the for-loop condition checks for the '\0' terminator one byte too late.
    (CVE-2021-36159)

FTP通信のパッシブモードによって領域外読み取りが可能ですが、libfetchはstrtolを使用して関連する数値をアドレスバイトに解析します。行が途中で終わるかどうかはチェックされません。その場合、p++がすでに実行されているため、*p == '\0'の1バイトに関するforループの条件チェックが遅すぎます。影響：改行が出現するまで（または文字が読み取られなくなるまで）サイズが増加するため、接続バッファのサイズが悪意のあるFTPサーバーによって制御される可能性があります。これにより、バッファをアドレス空間内のより興味深い領域に移動し、攻撃者に関連する数値を解析する可能性もあります。
これらのバイトは、構築されたポート番号またはIPv6アドレスの同等部分への新しいTCP接続の形式でサーバーで利用可能になるため、情報漏洩の可能性があります。

The passive mode in FTP communication allows an out of boundary read while libfetch uses strtol to parse the relevant numbers into address bytes. It does not check if the line ends prematurely. If it does, the for-loop condition checks for *p == '\0' one byte too late because p++ was already performed. Impact : The connection buffer size can be controlled by a malicious FTP server because the size is increased until a newline is encountered (or no more characters are read). This also allows to move the buffer into more interesting areas within the address space, potentially parsing relevant numbers for the attacker.
Since these bytes become available to the server in form of a new TCP connection to a constructed port number or even part of the IPv6 address this is a potential information leak.

ID	名稱	產品	系列	已發布	已更新	嚴重性
400169	Alpine: multiple apk-tools packages, lua5.3-apk: security update to 2.12.5-r1 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	critical
423668	Alpine: multiple apk-tools packages, multiple libapk2 packages: security update to 2.12.6-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	critical
400169	Alpine: multiple apk-tools packages, lua5.3-apk: security update to 2.12.5-r1 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/8/16	2026/7/2	critical
423668	Alpine: multiple apk-tools packages, multiple libapk2 packages: security update to 2.12.6-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2025/4/4	2026/7/2	critical
403558	Alpine: apk-tools: security update to 2.10.7-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
403558	Alpine: apk-tools: security update to 2.10.7-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	2023/10/31	2026/7/2	critical
152857	FreeBSD：FreeBSD-libfetchの領域外読み取り（d22b336d-0567-11ec-b69d-4062311215d5）	Nessus	FreeBSD Local Security Checks	2021/8/26	2023/12/1	critical
152857	FreeBSD : FreeBSD -- libfetch out of bounds read (d22b336d-0567-11ec-b69d-4062311215d5)	Nessus	FreeBSD Local Security Checks	2021/8/26	2023/12/1	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical