{"id":"CVE-2023-22643","aliases":["EUVD-2023-26777","GHSA-7mcm-wrpj-6fwv","SUSE-SU-2023:0095-1","SUSE-SU-2023:0140-1","openSUSE-SU-2024:12626-1"],"status":"published","title":"libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls","description":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.","severity":{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.02447,"percentile":0.84488,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-78"],"published":"2023-01-17T11:59:11Z","modified":"2026-06-17T05:35:49Z","fixes":[{"ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150400.18.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150400.18.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150400.18.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 6","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 7.1","package":"libzypp-plugin-appdata","fixed_in":["1.0.1+git.20180426-150100.8.3.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP4","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150400.18.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP4","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150400.18.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150400.18.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"libzypp-plugin-appdata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.1+git.20180426-150100.8.3.1"}]}]}],"products":[{"vendor":"opensuse","product":"libzypp-plugin-appdata"},{"vendor":"opensuse","product":"opensuse leap 15.4"},{"vendor":"suse","product":"suse linux enterprise server for sap 15-sp3"}],"references":[{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1206836","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22643"},{"url":"https://github.com/advisories/GHSA-7mcm-wrpj-6fwv"},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230095-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1206836","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-22643","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230140-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1181400","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-22643","title":"libzypp-plugin-appdata: potential arbitrary code execution via shell injection due to `os.system` calls","description":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.","status":"published","published":"2023-02-07T00:00:00Z","modified":"2025-03-25T14:31:19.35Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:35:16.126506Z"}],"euvd":[{"id":"EUVD-2023-26777","description":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.","status":"published","published":"2023-02-07T00:00:00Z","modified":"2025-03-25T14:31:19Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:53.129601Z"}],"ghsa":[{"id":"GHSA-7mcm-wrpj-6fwv","title":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...","description":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.","status":"published","published":"2023-02-07T12:30:22Z","modified":"2023-02-22T05:05:47Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:54:12.44657Z"}],"nvd":[{"id":"CVE-2023-22643","description":"An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.","status":"published","published":"2023-02-07T10:15:52.687Z","modified":"2026-06-17T05:35:49.927Z","cvss":[{"version":"3.1","score":6.3,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:07:46.064662Z"}],"osv":[{"id":"openSUSE-SU-2024:12626-1","title":"libzypp-plugin-appdata-1.0.1+git.20220816-1.1 on GA media","description":"These are all security issues fixed in the libzypp-plugin-appdata-1.0.1+git.20220816-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:30:56.760297Z","updated_at":"2026-11-02T16:58:35.751245Z"},{"id":"SUSE-SU-2023:0095-1","title":"Security update for libzypp-plugin-appdata","description":"This update for libzypp-plugin-appdata fixes the following issues:\n\n- CVE-2023-22643: Fixed potential shell injection related to malicious repo names (bsc#1206836).\n","status":"published","published":"2023-01-17T11:59:11Z","modified":"2026-02-04T02:57:19.883276Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"SUSE-SU-2023:0140-1","title":"Security update for libzypp-plugin-appdata","description":"This update for libzypp-plugin-appdata fixes the following issues:\n\n- CVE-2023-22643: Fixed potential shell injection related to malicious repo names (bsc#1206836).\n- Added hardening to systemd service (bsc#1181400). \n","status":"published","published":"2023-01-25T13:46:32Z","modified":"2026-02-04T03:19:46.193862Z","updated_at":"2026-11-02T15:53:51.853735Z"}]}}