Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2017-9270

post-auth arbitrary file write on cryptctl server

Description

In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SUSE cryptctl

  • unspecified to < 2.0affected

References