Unrated
In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database.
CVE-2017-9270
First seen on SecPulse
References
- report bugzilla.suse.com
- web lists.opensuse.org
- web suse.com