CVE-2017-7435

CVE-2017-7435 describes a vulnerability in libzypp versions prior to 20170803, affecting openSUSE systems. This flaw allowed the addition of unsigned YUM repositories without user warning, creating an opportunity for man-in-the-middle attacks or malicious servers to inject harmful RPM packages. With a CVSS score of 8.1 (High), the vulnerability presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability, despite requiring high attack complexity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.