CVE-2011-4183 open build service allows anyone to upload rpms
CriticalCVSS 9.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability in open build service allows remote attackers to upload arbitrary RPM files. Affected releases are SUSE open build service prior to 2.1.16.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openSUSE open build service | < 2.1.16 | 2.1.16 |
| SUSE Open Build Service | < 2.1.16 | 2.1.16 |
References
- bugzilla.suse.com
- github.com
- Debian Security Tracker CVE-2011-4183 vendor-advisory