Lucene search

CVE-2017-9269 lack of keypinning in libzypp could lead to repository switching

🗓️ 01 Mar 2018 19:00:00Reported by microfocusType

Lack of keypinning in libzypp leading to repository switchin

Reporter	Title	Published	Views	Family All 38
NVD	CVE-2017-9269	1 Mar 201820:29	–	nvd
CVE	CVE-2017-9269	1 Mar 201820:29	–	cve
Debian CVE	CVE-2017-9269	1 Mar 201820:29	–	debiancve
UbuntuCve	CVE-2017-9269	1 Mar 201800:00	–	ubuntucve
Prion	Code injection	1 Mar 201820:29	–	prion
OSV	zypper-1.14.49-1.2 on GA media	15 Jun 202400:00	–	osv
OSV	libzypp-17.28.4-1.2 on GA media	15 Jun 202400:00	–	osv
Tenable Nessus	SUSE SLES12 Security Update : libzypp, zypper (SUSE-SU-2018:2716-2)	22 Oct 201800:00	–	nessus
Tenable Nessus	SUSE SLED15 / SLES15 Security Update : libzypp, zypper (SUSE-SU-2018:2690-1)	2 Jan 201900:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : libzypp, zypper (SUSE-SU-2018:2814-1)	25 Sep 201800:00	–	nessus

[
  {
    "product": "libzypp",
    "vendor": "SUSE",
    "versions": [
      {
        "lessThan": "201808",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
lists	www.lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html
suse	www.suse.com/de-de/security/cve/CVE-2017-9269/
bugzilla	www.bugzilla.suse.com/show_bug.cgi

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Mar 2018 19:00Current

9.4High risk

Vulners AI Score9.4

CVSS37.7

EPSS0.003

CWE-757