CVE-2017-9270

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.

Metrics

CVSS 3.0 9.1/10CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-22CWE-20

Affected software

VendorProductVersions
SUSEcryptctl>= unspecified, < 2.0

References

Timeline

Published
Mar 1, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-92713.3The commandline package update tool zypper writes HTTP proxy credentials into its logfile, allowing local attackers to gain access to proxieCVE-2017-92727.5The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to a denial of service attack.CVE-2017-92735.3The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be susceptible to unauthorized log configuration changes.CVE-2017-92747.8A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPECVE-2017-92756.1NetIQ Identity Reporting, in versions prior to 5.5 Service Pack 1, is susceptible to an XSS attack.CVE-2017-92766.1Novell Access Manager iManager before 4.3.3 did not validate parameters so that cross site scripting content could be reflected back into thCVE-2017-92777.5The LDAP backend in Novell eDirectory before 9.0 SP4 when switched to EBA (Enhanced Background Authentication) kept open connections withoutCVE-2017-92789.8The NetIQ Identity Manager Oracle EBS driver before 4.0.2.0 sent EBS logs containing the driver authentication password, potentially disclosCVE-2017-92797.2NetIQ Identity Manager before 4.5.6.1 allowed uploading files with double extensions or non-image content in the Themes handling of the UserCVE-2017-92807.5Some NetIQ Identity Manager Applications before Identity Manager 4.5.6.1 included the session token in GET URLs, potentially allowing exposuCVE-2017-92817.5An integer overflow (CWE-190) potentially causing an out-of-bounds read (CWE-125) vulnerability in Micro Focus VisiBroker 8.5 can lead to a CVE-2017-92829.8An integer overflow (CWE-190) led to an out-of-bounds write (CWE-787) on a heap-allocated area, leading to heap corruption in Micro Focus Vi
CVE-2017-9270: Critical severity, CVSS 9.1 | Vulnix