Critical severity9.8NVD Advisory· Published Jul 21, 2017· Updated May 13, 2026

CVE-2017-7480

Description

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.

Affected products

Rootkit Hunter Project/Rootkit Hunter
cpe:2.3:a:rootkit_hunter_project:rootkit_hunter:*:*:*:*:*:*:*:*
Range: <=1.4.2
Red Hat, Inc./rkhunterv5
Range: before 1.4.4

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

seclists.org/oss-sec/2017/q2/643nvdMailing ListThird Party Advisory
security.gentoo.org/glsa/201805-11nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000