CVE-2016-4007: Critical severity suse linux vulnerability
Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal options."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-4007?
CVE-2016-4007 is considered a medium severity vulnerability due to its potential for arbitrary command execution.
How do I fix CVE-2016-4007?
To mitigate CVE-2016-4007, update the obs-service-extract_file package to version 0.3-5.1 or later in openSUSE Leap 42.1 and 0.3-3.1 or later in openSUSE 13.2.
Which systems are affected by CVE-2016-4007?
CVE-2016-4007 affects openSUSE Leap 42.1 and openSUSE 13.2 installations with vulnerable versions of the obs-service-extract_file package.
What type of attacks can CVE-2016-4007 facilitate?
CVE-2016-4007 can facilitate attacks that allow an attacker to execute arbitrary commands on the affected systems.
What are the implications of exploiting CVE-2016-4007?
Exploiting CVE-2016-4007 may lead to unauthorized access and control over systems running affected versions of the software.