VULNERABILITY INTELLIGENCE

CVE-2017-9274

CVSS score9.3 HIGH

EPSS probability2.30%

CISA KEVNot currently listed

Published2018-03-01

Last modified2026-06-17

Description

A shell command injection in the obs-service-source_validator before 0.7 could be used to execute code as the packager when checking RPM SPEC files with specific macro constructs.