Field Assessment
AI analysis pending.
CVE
CVE-2018-7685
Severity
HIGH
CVSS
7.8
EPSS
0.29%
Original Filing — NVD Description
The decoupled download and installation steps in libzypp before 17.5.0 could lead to a corrupted RPM being left in the cache, where a later call would not display the corrupted RPM warning and allow installation, a problem caused by malicious warnings only displayed during download.