High severity · published Mar 1, 2018
CVE-2017-5188
The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing…
7.5
CVSS
1.1%
EPSS
No
On KEV
Description
The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OB
Open Build Service · Opensuse
through 2.7.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-5188
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-5188
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=1029824
github.com
https://github.com/openSUSE/open-build-service/commit/ba27c91351878bc297ec4baba0bd488a2f3b568d
www.suse.com
https://www.suse.com/de-de/security/cve/CVE-2017-5188/
More from Open Build Service
9.8
CVE-2011-4183
A vulnerability in open build service allows remote attackers to upload arbitrary RPM files
9.8
CVE-2014-0593
The set_version script as shipped with obs-service-set_version is a source validator for the Open Build Service (OBS)
8.8
CVE-2022-21949
A Improper Restriction of XML External Entity Reference vulnerability in SUSE Open Build Service allows remote attackers to reference external entities in certain operations
8.8
CVE-2021-36777
A Reliance on Untrusted Inputs in a Security Decision vulnerability in the login proxy of the openSUSE Build service allowed attackers to present users with a expected login form…
8.8
CVE-2014-0594
In the Open Build Service (OBS) before version 2.4.6 the CSRF protection is incorrectly disabled in the web interface, allowing for requests without the user's consent