Known vulnerabilities in libzypp

Vendor: SUSE
Software: libzypp
Software CPE: cpe:2.3:o:suse:libzypp:*:*:*:*:*:*:*:*
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libzypp libzypp is affected by 7 known vulnerabilities: 2 medium, 5 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU102829 - Information Exposure Through Log Files
CVE-2017-9271
CWE-532 Low
No
No
16.22.13-65.3, 17.25.8-3.48.1, 17.25.8-3.66.1 15.01.2025 SB2025011591
SB2025011620
SB202502195709
and 3 more
#VU87936 - Use After Free
CVE-2024-0217
CWE-416 Low
No
No
17.32.2-150200.92.3 01.04.2024 SB2024040140
SB2024040142
SB2024041150
#VU62515 - Improper input validation
CVE-2021-3200
CWE-20 Low
No
No
16.21.4-2.51.1, 16.21.4-27.75.1 22.04.2022 SB2022042257
SB2021062320
SB2021062819
and 11 more
#VU25672 - Incorrect Default Permissions
CVE-2019-18900
CWE-276 Low
No
No
14.48.4, 15.28.4, 16.21.2, 17.19.0 27.02.2020 SB2020012422
SB2020022723
#VU24490 - Out-of-bounds read
CVE-2019-20387
CWE-125 Medium
No
No
16.21.4-2.51.1, 16.21.4-27.75.1 22.01.2020 SB2020012221
SB2020110530
SB2020112328
and 7 more
#VU36755 - Improper Verification of Cryptographic Signature
CVE-2018-7685
CWE-347 Low
No
No
17.5.0 31.08.2018 SB2018083111
SB2018092610
SB2018090642
#VU42411 - Cryptographic Issues
CVE-2013-3704
CWE-310 Medium
No
No
- 29.10.2013 SB2013102907