CVE-2017-7480: Critical severity Rootkit Hunter Project Rootkit Hunter vulnerability
rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/rkhunterto a version that resolves this vulnerability.Fixed in 1.4.0-3ubuntu0.1~esm1 - Upgrade
Upgrade
ubuntu/rkhunterto a version that resolves this vulnerability.Fixed in 1.4.2-5ubuntu0.1~esm1 - Upgrade
Upgrade
rkhunterto a version that resolves this vulnerability.Fixed in 1.4.4
Event History
Frequently Asked Questions
What is the severity of CVE-2017-7480?
CVE-2017-7480 is classified as a moderate severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2017-7480?
To fix CVE-2017-7480, upgrade Rootkit Hunter to version 1.4.4 or later.
What software versions are affected by CVE-2017-7480?
CVE-2017-7480 affects all versions of Rootkit Hunter prior to 1.4.4.
What kind of attack does CVE-2017-7480 enable?
CVE-2017-7480 enables an attacker to potentially execute arbitrary code by exploiting a file download over an insecure channel.
Is there a workaround for CVE-2017-7480?
There are no official workarounds for CVE-2017-7480; upgrading to a patched version is strongly recommended.