CVE-2023-22643
Fixed in a distro release EPSS 2%CVSS 6.3
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.
Products: SUSE Linux Enterprise Server for SAP 15-SP3, openSUSE Leap 15.4
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| SUSE Enterprise Storage 6 | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Enterprise Storage 7 | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Enterprise Storage 7.1 | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP4 | libzypp-plugin-appdata | 1.0.1+git.20180426-150400.18.3.1 |
| SUSE Linux Enterprise Module for Package Hub 15 SP4 | libzypp-plugin-appdata | 1.0.1+git.20180426-150400.18.3.1 |
| SUSE Linux Enterprise Real Time 15 SP3 | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise Server 15 SP1-LTSS | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise Server 15 SP2-LTSS | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP1 | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP2 | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | libzypp-plugin-appdata | 1.0.1+git.20180426-150100.8.3.1 |
| openSUSE Leap 15.4 | libzypp-plugin-appdata | 1.0.1+git.20180426-150400.18.3.1 |