CVE-2017-7480 Supply chain in rkhunter
Attackers can execute arbitrary code by exploiting insecure mirror updates in rkhunter, compromising system integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2017-7480?
CVE-2017-7480 is a critical vulnerability in Red Hat, Inc. rkhunter, published on 21 Jul 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.
Which versions are affected by CVE-2017-7480?
It affects 1 product.
Products include Rootkit Hunter Project Rootkit Hunter.
How do I fix CVE-2017-7480?
Upgrade to a fixed version.
Is CVE-2017-7480 being exploited?
There is no known exploitation of CVE-2017-7480 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2017-7480, DLA-1039-1, GHSA-5xw7-mvf3-r2j6, MGASA-2018-0029, UBUNTU-CVE-2017-7480.