2 matches found
CVE-2018-7685
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download...
7.8CVSS7.1AI score0.00286EPSS
SaveExploits0References4
Design/Logic Flaw
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download...
4.6CVSS7.3AI score0.00286EPSS
SaveExploits0References3Affected Software1
20