CVE-2017-7480 rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.
CriticalCVSS 9.8
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/rkhunter(Debian:12) | < 1.4.4-1 | 1.4.4-1 |
| debian/rkhunter(Debian:13) | < 1.4.4-1 | 1.4.4-1 |
| debian/rkhunter(Debian:14) | < 1.4.4-1 | 1.4.4-1 |
| rootkit hunter project rootkit hunter | <= 1.4.2 | No fix listed |
| redhat rkhunter | = before 1.4.4 | No fix listed |
References
- Debian Security Tracker CVE-2017-7480 vendor-advisory
- [oss-security] 20170629 rkhunter: [CVE-2017-7480] Potential RCE after MiTM due to clear text download without signature mailing-list third-party-advisory
- GLSA-201805-11 third-party-advisory vendor-advisory
- bugs.debian.org issue-tracking