CVE-2017-9269 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.7 HIGH	NETWORK	HIGH	NONE	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Base Score

CVSS 3.x

EPSS Score

Percentile: 70%

Affected Products (NVD)

Vendor	Product	Version
opensuse	libzypp	-

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

libzypp

bookworm	17.25.7-2.4 fixed
bullseye	17.25.7-1 fixed
jessie	ignored
sid	17.35.12-1 fixed
trixie	17.35.12-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

libzypp

artful	ignored
bionic	dne
cosmic	not-affected
disco	not-affected
eoan	not-affected
focal	not-affected
groovy	dne
hirsute	not-affected
impish	not-affected
jammy	not-affected
kinetic	not-affected
lunar	not-affected
mantic	not-affected
noble	not-affected
trusty	dne
xenial	needed
zesty	ignored

openSUSE / SLES Releases

openSUSE Product

Release

libsolv-devel

suse enterprise desktop 15	0.6.35-3.5.2 fixed
suse enterprise sap 15	0.6.35-3.5.2 fixed
suse enterprise server 15	0.6.35-3.5.2 fixed

libsolv-tools

suse enterprise desktop 15	0.6.35-3.5.2 fixed
suse enterprise sap 15	0.6.35-3.5.2 fixed
suse enterprise server 15	0.6.35-3.5.2 fixed

libzypp

suse enterprise desktop 15	17.6.4-3.10.1 fixed
suse enterprise desktop 15 SP1	17.11.4-1.8 fixed
suse enterprise desktop 15 SP2	17.23.6-1.2 fixed
suse enterprise desktop 15 SP3	17.25.8-3.33.1 fixed
suse enterprise desktop 15 SP4	17.30.0-150400.1.6 fixed
suse enterprise desktop 15 SP5	17.31.8-150400.3.14.1 fixed
suse enterprise desktop 15 SP6	17.32.4-150600.1.2 fixed
suse enterprise desktop 15 SP7	17.36.3-150600.3.50.1 fixed
suse enterprise sap 12 SP3	16.17.20-2.33.2 fixed
suse enterprise sap 12 SP5	16.20.0-2.39.4 fixed
suse enterprise sap 15	17.6.4-3.10.1 fixed
suse enterprise sap 15 SP1	17.11.4-1.8 fixed
suse enterprise sap 15 SP2	17.23.6-1.2 fixed
suse enterprise sap 15 SP3	17.25.8-3.33.1 fixed
suse enterprise sap 15 SP4	17.30.0-150400.1.6 fixed
suse enterprise sap 15 SP5	17.31.8-150400.3.14.1 fixed
suse enterprise sap 15 SP6	17.32.4-150600.1.2 fixed
suse enterprise sap 15 SP7	17.36.3-150600.3.50.1 fixed
suse enterprise server 12	14.45.17-2.82.1 fixed
suse enterprise server 12 SP1	15.25.17-46.22.1 fixed
suse enterprise server 12 SP2	16.17.20-27.52.1 fixed
suse enterprise server 12 SP3	16.17.20-2.33.2 fixed
suse enterprise server 12 SP5	16.20.0-2.39.4 fixed
suse enterprise server 15	17.6.4-3.10.1 fixed
suse enterprise server 15 SP1	17.11.4-1.8 fixed
suse enterprise server 15 SP2	17.23.6-1.2 fixed
suse enterprise server 15 SP3	17.25.8-3.33.1 fixed
suse enterprise server 15 SP4	17.30.0-150400.1.6 fixed
suse enterprise server 15 SP5	17.31.8-150400.3.14.1 fixed
suse enterprise server 15 SP6	17.32.4-150600.1.2 fixed
suse enterprise server 15 SP7	17.36.3-150600.3.50.1 fixed

libzypp-devel

suse enterprise desktop 15	17.6.4-3.10.1 fixed
suse enterprise desktop 15 SP1	17.11.4-1.8 fixed
suse enterprise desktop 15 SP2	17.23.6-1.2 fixed
suse enterprise desktop 15 SP3	17.25.8-3.33.1 fixed
suse enterprise desktop 15 SP4	17.30.0-150400.1.6 fixed
suse enterprise desktop 15 SP5	17.31.8-150400.3.14.1 fixed
suse enterprise desktop 15 SP6	17.32.4-150600.1.2 fixed
suse enterprise desktop 15 SP7	17.36.3-150600.3.50.1 fixed
suse enterprise sap 15	17.6.4-3.10.1 fixed
suse enterprise sap 15 SP1	17.11.4-1.8 fixed
suse enterprise sap 15 SP2	17.23.6-1.2 fixed
suse enterprise sap 15 SP3	17.25.8-3.33.1 fixed
suse enterprise sap 15 SP4	17.30.0-150400.1.6 fixed
suse enterprise sap 15 SP5	17.31.8-150400.3.14.1 fixed
suse enterprise sap 15 SP6	17.32.4-150600.1.2 fixed
suse enterprise sap 15 SP7	17.36.3-150600.3.50.1 fixed
suse enterprise server 15	17.6.4-3.10.1 fixed
suse enterprise server 15 SP1	17.11.4-1.8 fixed
suse enterprise server 15 SP2	17.23.6-1.2 fixed
suse enterprise server 15 SP3	17.25.8-3.33.1 fixed
suse enterprise server 15 SP4	17.30.0-150400.1.6 fixed
suse enterprise server 15 SP5	17.31.8-150400.3.14.1 fixed
suse enterprise server 15 SP6	17.32.4-150600.1.2 fixed
suse enterprise server 15 SP7	17.36.3-150600.3.50.1 fixed

perl-solv

suse enterprise desktop 15	0.6.35-3.5.2 fixed
suse enterprise sap 15	0.6.35-3.5.2 fixed
suse enterprise server 15	0.6.35-3.5.2 fixed

python-solv

suse enterprise desktop 15	0.6.35-3.5.2 fixed
suse enterprise sap 15	0.6.35-3.5.2 fixed
suse enterprise server 15	0.6.35-3.5.2 fixed

python3-solv

suse enterprise desktop 15	0.6.35-3.5.2 fixed
suse enterprise sap 15	0.6.35-3.5.2 fixed
suse enterprise server 15	0.6.35-3.5.2 fixed

ruby-solv

suse enterprise desktop 15	0.6.35-3.5.2 fixed
suse enterprise sap 15	0.6.35-3.5.2 fixed
suse enterprise server 15	0.6.35-3.5.2 fixed

yast2-pkg-bindings

suse enterprise sap 12 SP3	3.2.4-2.3.1 fixed
suse enterprise server 12 SP3	3.2.4-2.3.1 fixed

zypper

suse enterprise desktop 15	1.14.10-3.7.1 fixed
suse enterprise desktop 15 SP1	1.14.27-1.11 fixed
suse enterprise desktop 15 SP2	1.14.36-1.16 fixed
suse enterprise desktop 15 SP3	1.14.43-3.20.1 fixed
suse enterprise desktop 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise desktop 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise desktop 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise desktop 15 SP7	1.14.85-150600.10.28.1 fixed
suse enterprise sap 12 SP3	1.13.45-21.21.2 fixed
suse enterprise sap 12 SP5	1.13.51-21.26.4 fixed
suse enterprise sap 15	1.14.10-3.7.1 fixed
suse enterprise sap 15 SP1	1.14.27-1.11 fixed
suse enterprise sap 15 SP2	1.14.36-1.16 fixed
suse enterprise sap 15 SP3	1.14.43-3.20.1 fixed
suse enterprise sap 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise sap 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise sap 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise sap 15 SP7	1.14.85-150600.10.28.1 fixed
suse enterprise server 12	1.11.70-2.69.2 fixed
suse enterprise server 12 SP1	1.12.59-46.10.1 fixed
suse enterprise server 12 SP2	1.13.45-18.33.1 fixed
suse enterprise server 12 SP3	1.13.45-21.21.2 fixed
suse enterprise server 12 SP5	1.13.51-21.26.4 fixed
suse enterprise server 15	1.14.10-3.7.1 fixed
suse enterprise server 15 SP1	1.14.27-1.11 fixed
suse enterprise server 15 SP2	1.14.36-1.16 fixed
suse enterprise server 15 SP3	1.14.43-3.20.1 fixed
suse enterprise server 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise server 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise server 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise server 15 SP7	1.14.85-150600.10.28.1 fixed

zypper-log

suse enterprise desktop 15	1.14.10-3.7.1 fixed
suse enterprise desktop 15 SP1	1.14.27-1.11 fixed
suse enterprise desktop 15 SP2	1.14.36-1.16 fixed
suse enterprise desktop 15 SP3	1.14.43-3.20.1 fixed
suse enterprise desktop 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise desktop 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise desktop 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise desktop 15 SP7	1.14.85-150600.10.28.1 fixed
suse enterprise sap 12 SP3	1.13.45-21.21.2 fixed
suse enterprise sap 12 SP5	1.13.51-21.26.4 fixed
suse enterprise sap 15	1.14.10-3.7.1 fixed
suse enterprise sap 15 SP1	1.14.27-1.11 fixed
suse enterprise sap 15 SP2	1.14.36-1.16 fixed
suse enterprise sap 15 SP3	1.14.43-3.20.1 fixed
suse enterprise sap 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise sap 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise sap 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise sap 15 SP7	1.14.85-150600.10.28.1 fixed
suse enterprise server 12	1.11.70-2.69.2 fixed
suse enterprise server 12 SP1	1.12.59-46.10.1 fixed
suse enterprise server 12 SP2	1.13.45-18.33.1 fixed
suse enterprise server 12 SP3	1.13.45-21.21.2 fixed
suse enterprise server 12 SP5	1.13.51-21.26.4 fixed
suse enterprise server 15	1.14.10-3.7.1 fixed
suse enterprise server 15 SP1	1.14.27-1.11 fixed
suse enterprise server 15 SP2	1.14.36-1.16 fixed
suse enterprise server 15 SP3	1.14.43-3.20.1 fixed
suse enterprise server 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise server 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise server 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise server 15 SP7	1.14.85-150600.10.28.1 fixed

zypper-needs-restarting

suse enterprise desktop 15 SP1	1.14.27-1.11 fixed
suse enterprise desktop 15 SP2	1.14.36-1.16 fixed
suse enterprise desktop 15 SP3	1.14.43-3.20.1 fixed
suse enterprise desktop 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise desktop 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise desktop 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise desktop 15 SP7	1.14.85-150600.10.28.1 fixed
suse enterprise sap 15 SP1	1.14.27-1.11 fixed
suse enterprise sap 15 SP2	1.14.36-1.16 fixed
suse enterprise sap 15 SP3	1.14.43-3.20.1 fixed
suse enterprise sap 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise sap 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise sap 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise sap 15 SP7	1.14.85-150600.10.28.1 fixed
suse enterprise server 15 SP1	1.14.27-1.11 fixed
suse enterprise server 15 SP2	1.14.36-1.16 fixed
suse enterprise server 15 SP3	1.14.43-3.20.1 fixed
suse enterprise server 15 SP4	1.14.52-150400.1.9 fixed
suse enterprise server 15 SP5	1.14.59-150400.3.12.2 fixed
suse enterprise server 15 SP6	1.14.71-150600.8.2 fixed
suse enterprise server 15 SP7	1.14.85-150600.10.28.1 fixed

Common Weakness Enumeration

CWE-757 - Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.
CWE-20 - Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References

https://bugzilla.suse.com/show_bug.cgi?id=1045735

https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html

https://www.suse.com/de-de/security/cve/CVE-2017-9269/

https://bugzilla.suse.com/show_bug.cgi?id=1045735

https://lists.opensuse.org/opensuse-security-announce/2017-08/msg00002.html

https://www.suse.com/de-de/security/cve/CVE-2017-9269/