Medium severity · published Jul 27, 2018
CVE-2017-2623
It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering
5.3
CVSS
1%
EPSS
No
On KEV
Description
It was discovered that rpm-ostree and rpm-ostree-client before 2017.3 fail to properly check GPG signatures on packages when doing layering. Packages with unsigned or badly signed content could fail to be rejected as expected. This issue is partially mitigated on RHEL Atomic Host, where certificate pinning is used by default.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
7.0 · source: NVD
RP
Rpm-ostree · Rpm-ostree
before 2017.3 · source: NVD
RP
Rpm-ostree-client · Rpm-ostree
before 2017.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2623
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2623
Third Party Advisory
http://www.securityfocus.com/bid/96558
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:0444
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2623
More from Enterprise Linux
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2018-14667
The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.0
CVE-2021-40438
mod_proxy SSRF