Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mrf9-ghhp-cjff

Опубликовано: 13 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.

The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.

EPSS

Процентиль: 22%
0.00073
Низкий

7.8 High

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 7 лет назад

The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.

CVSS3: 7.8
nvd
больше 7 лет назад

The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.

CVSS3: 7.8
debian
больше 7 лет назад

The decoupled download and installation steps in libzypp before 17.5.0 ...

suse-cvrf
больше 7 лет назад

Security update for libzypp, zypper

suse-cvrf
больше 7 лет назад

Security update for libzypp, zypper

EPSS

Процентиль: 22%
0.00073
Низкий

7.8 High

CVSS3

Дефекты

CWE-347