High severity8.1NVD Advisory· Published Mar 1, 2018· Updated Jun 17, 2026
CVE-2017-7436
CVE-2017-7436
Description
In libzypp before 20170803 it was possible to retrieve unsigned packages without a warning to the user which could lead to man in the middle or malicious servers to inject malicious RPM packages into a users system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29- osv-coords27 versionspkg:rpm/opensuse/zypper&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSSpkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP2pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20Raspberry%20Pi%2012%20SP2pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP2pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/yast2-pkg-bindings-devel-doc&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP3pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/yast2-pkg-bindings&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP3pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP3pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/libzypp&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1pkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSSpkg:rpm/suse/zypper&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS
< 1.14.49-1.2+ 26 more
- (no CPE)range: < 1.14.49-1.2
- (no CPE)range: < 16.15.2-27.21.1
- (no CPE)range: < 15.25.17-46.22.1
- (no CPE)range: < 14.45.17-2.82.1
- (no CPE)range: < 16.15.2-27.21.1
- (no CPE)range: < 1.13.30-18.13.3
- (no CPE)range: < 16.15.2-27.21.1
- (no CPE)range: < 1.13.30-18.13.3
- (no CPE)range: < 16.15.2-27.21.1
- (no CPE)range: < 16.15.2-27.21.1
- (no CPE)range: < 1.13.30-18.13.3
- (no CPE)range: < 1.13.30-18.13.3
- (no CPE)range: < 16.15.3-2.3.1
- (no CPE)range: < 3.2.4-2.3.1
- (no CPE)range: < 16.15.3-2.3.1
- (no CPE)range: < 3.2.4-2.3.1
- (no CPE)range: < 16.15.3-2.3.1
- (no CPE)range: < 3.2.4-2.3.1
- (no CPE)range: < 16.15.3-2.3.1
- (no CPE)range: < 3.2.4-2.3.1
- (no CPE)range: < 1.13.32-21.3.2
- (no CPE)range: < 1.13.32-21.3.2
- (no CPE)range: < 1.13.32-21.3.2
- (no CPE)range: < 1.12.59-46.10.1
- (no CPE)range: < 15.25.17-46.22.1
- (no CPE)range: < 1.12.59-46.10.1
- (no CPE)range: < 1.11.70-2.69.2
- SUSE/libzyppv5Range: unspecified
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.