Skip to content
OpenAdvisories

Package · Debian

libzypp

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-44942

    libzypp .repo files can have an optional path which can lead to path traversal attacks

    A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.13 in the 17.x series, or before 16.22.19 could be used by attackers to fill directories on the system outside of the zypp cache with content.

    SUSE libzypp libzypp libzypp Debian Ubuntu
  • Medium 4.0
    CVE-2019-18900

    libzypp stores cookies world readable

    : Incorrect Default Permissions vulnerability in libzypp of SUSE CaaS Platform 3.0, SUSE Linux Enterprise Server 12, SUSE Linux Enterprise Server 15 allowed local attackers to read a cookie store used by libzypp, exposing private cookies. This issue affects: …

    SUSE SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 12 CaaS Platform 3.0 Linux Debian Ubuntu
  • Medium 4.0
    CVE-2017-9271

    proxy credentials written to log files by zypper

    The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxies used.

    SUSE zypper libzypp zypper Debian Ubuntu