CVE-2013-1764

Опубликовано: 30 июл. 2013

Источник: redhat

CVSS2: 2.1

Описание

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.

Not vulnerable. This issue did not affect the version of PackageKit in Red Hat Enterprise Linux, as Zypper support was not included.

Платформа	Пакет	Состояние	Рекомендация	Релиз
Red Hat Enterprise Linux 6	PackageKit	Not affected
Red Hat Enterprise Linux 7	PackageKit	Not affected

Показывать по

Статус:

Low

https://bugzilla.redhat.com/show_bug.cgi?id=1090771PackageKit: downgrade packages when using the Zypper backend

2.1 Low

CVSS2

CVE-2013-1764

ubuntu

больше 12 лет назад

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.

CVE-2013-1764

nvd

больше 12 лет назад

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.

CVE-2013-1764

debian

больше 12 лет назад

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local ...

GHSA-9g9q-8hww-wvfx

github

около 4 лет назад

The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.

2.1 Low

CVSS2