libzypp vulnerabilities (SUSE)
34 vulnerabilities.
-
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE Security update for libzypp, zypper No score -
libzyppSUSE libzypp .repo files can have an optional path which can lead to path traversal attacks 6.5 Medium -
libzyppSUSE libzypp path traversal via "keyhint" in repomd.xml 8.4 High -
libzyppSUSE Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service 7.5 High -
libzyppSUSE Handcrafted repo metadata may cause arbitrary local files to be overwritten by libzypp 8.8 High -
libzyppSUSE Libsolv: heap buffer overflow in libsolv repo_add_solv via negative maxsize from crafted .solv file 6.5 Medium -
libzyppSUSE Libsolv: stack-based buffer overflow in libsolv's debian metadata parser when handling sha384/sha512 checksums 6.5 Medium -
libzyppSUSE Path Traversal in Plugin Loading in libzypp 8.5 High -
libzyppSUSE Packagekitd: use-after-free in idle function callback 3.3 Low -
libzyppSUSE Security update for libsolv, libzypp, zypper No score -
libzyppSUSE Security update for libsolv, libzypp, zypper No score -
libzyppSUSE Security update for libsolv, libzypp, zypper No score -
libzyppSUSE Security update for libsolv, libzypp, zypper No score -
libzyppSUSE Security update for libsolv, libzypp No score -
libzyppSUSE Buffer overflow vulnerability in libsolv 2020-12-13 via the Solver * testcase_read(Pool *pool,... 3.3 Low -
libzyppSUSE repodata_schema2id in repodata.c in libsolv before 0.7.6 has a heap-based buffer over-read via a... 7.5 High -
libzyppSUSE libzypp stores cookies world readable 4.0 Medium -
libzyppSUSE ** DISPUTED ** There is an illegal address access at ext/testcase.c in libsolv.a in libsolv... 6.5 Medium -
libzyppSUSE There is a NULL pointer dereference at ext/testcase.c (function testcase_str2dep_complex) in... 6.5 Medium -
libzyppSUSE There is a NULL pointer dereference at ext/testcase.c (function testcase_read) in libsolvext.a in... 6.5 Medium -
libzyppSUSE libzypp does not reevaluate malicious rpms once downloaded 7.8 High -
libzyppSUSE proxy credentials written to log files by zypper 4.0 Medium -
libzyppSUSE lack of keypinning in libzypp could lead to repository switching 7.7 High -
libzyppSUSE libzypp accepts unsigned packages even when configured to check signatures 8.1 High -
libzyppSUSE libzypp accepts unsigned 3rd party repo without warning 8.1 High -
libzyppSUSE The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic... 3.4 Low