8.1high
CVE-2017-7435
libzypp accepts unsigned 3rd party repo without warning
Published 8 y ago · modified 4 mo ago · JSON
CVSS
8.1
v3.0 · CNA
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 79%
Public exploits
0
none known
Summary
In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system.
Exploit prediction (EPSS)
1.81% probability of exploitation in the next 30 days, higher than 79% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.0 | 8.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.0 | 8.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.0 | 8.1 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Affected products
- SUSE libzypp
Classification
- Weakness
- CWE-20 Improper Input Validation
References
- lists.opensuse.org /opensuse-security-announce/2017-08/msg00002.html · vendor-advisory, x_refsource_SUSE, x_transferred
- suse.com /de-de/security/cve/CVE-2017-7435/ · x_refsource_CONFIRM, x_transferred
- bugzilla.suse.com /show_bug.cgi?id=1009127 · x_refsource_CONFIRM, x_transferred
Sources
- CVE List: CVE-2017-7435
- NVD: CVE-2017-7435
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.