Medium severity5.0NVD Advisory· Published Mar 1, 2018· Updated Jun 17, 2026

CVE-2017-5188

Description

The bs_worker code in open build service before 20170320 followed relative symlinks, allowing reading of files outside of the package source directory during build, allowing leakage of private information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

OpenSUSE/Open Build Service
cpe:2.3:a:opensuse:open_build_service:*:*:*:*:*:*:*:*
Range: <=2.7.3
Open Build Service/open build servicellm-create
Range: <20170320
SUSE S.A./openSUSE Build Servicellm-create
Range: <20170320
OpenSUSE/Build servicecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

bugzilla.suse.com/show_bug.cginvd
github.com/openSUSE/open-build-service/commit/ba27c91351878bc297ec4baba0bd488a2f3b568dnvd
www.suse.com/de-de/security/cve/CVE-2017-5188/nvd

News mentions

No linked articles in our index yet.

cvss	0.325
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000