High severity · published Aug 31, 2018
CVE-2018-7685
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libzypp · Opensuse
before 17.5.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7685
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7685
lists.suse.com
http://lists.suse.com/pipermail/sle-security-updates/2018-August/004510.html
bugzilla.suse.com
https://bugzilla.suse.com/show_bug.cgi?id=1091624
www.suse.com
https://www.suse.com/de-de/security/cve/CVE-2018-7685/
More from Libzypp
9.8
CVE-2017-9269
In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories…
8.8
CVE-2026-44941
libzypp path traversal via "keyhint" in repomd.xml
8.8
CVE-2026-25707
Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp
8.1
CVE-2017-7436
In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject…
8.1
CVE-2017-7435
In libzypp before 20170803 it was possible to add unsigned YUM repositories without warning to the user that could lead to man in the middle or malicious servers to inject…