CVE catalog

CVE-2017-7480

rkhunter: CVE-2017-7480

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
2.35% · Oct 25, 2026

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrkhuntersid1.4.6-14fixed
Debianrkhunterforky1.4.6-14fixed
Debianrkhuntertrixie1.4.6-13fixed
Debianrkhunterbookworm1.4.6-11fixed
Ubunturkhunterpro1.4.0-3vulnerable
Ubunturkhunterpro1.4.0-3ubuntu0.1~esm1fixed
Ubunturkhunter16.041.4.2-3vulnerable
Ubunturkhunter16.041.4.2-4vulnerable
Ubunturkhunter16.041.4.2-5vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrkhuntersourcesid1.4.4-1not yet assignedNot reported[866677]
Debianrkhuntersourceforky1.4.4-1not yet assignedNot reported[866677]
Debianrkhuntersourcetrixie1.4.4-1not yet assignedNot reported[866677]
Debianrkhuntersourcebookworm1.4.4-1not yet assignedNot reported[866677]
Ubunturkhunterdebpro1.4.0-3ubuntu0.1~esm1Not reportedUBUNTU-CVE-2017-7480Not reported

[Debian bug #866677]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [rkhunter]Fixed
    Details (2)

    • 1.4.6-11 · all · bookworm

      Fixed · Fixed: 1.4.4-1

      dsa · rkhunter · debian · bookworm; dsa · rkhunter · debian · 12

    • 1.4.6-11 · all · bookworm

      Fixed · Fixed: 1.4.4-1

      dsa · rkhunter · debian · bookworm; dsa · rkhunter · debian · 12

[Debian 13 (Trixie)]

  • [rkhunter]Fixed
    Details (2)

    • 1.4.6-13 · all · trixie

      Fixed · Fixed: 1.4.4-1

      dsa · rkhunter · debian · 13

    • 1.4.6-13 · all · trixie

      Fixed · Fixed: 1.4.4-1

      dsa · rkhunter · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]