CVE-2013-1764
- State
- Published
- Severity
- Not scored
- Published
- Apr 16, 2014
- Updated
- Aug 6, 2024
- Reserved
- Feb 19, 2013
Description
The Zypper (aka zypp) backend in PackageKit before 0.8.8 allows local users to downgrade packages via the "install updates" method.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- [oss-security] 20130225 Re: CVE Request: PackageKit"update" allows downgrade of packages when using the "zypp" backendmailing-list
- https://gitorious.org/packagekit/packagekit/source/NEWS
- https://bugs.freedesktop.org/show_bug.cgi?id=61231
- openSUSE-SU-2013:0889vendor-advisory
- https://bugzilla.novell.com/show_bug.cgi?id=804983
- https://gitorious.org/packagekit/packagekit/commit/d3d14631042237bcfe6fb30a60e59bb6d94af425
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.