CVE-2017-9271

Unscored

Advisory

Published 13 Jan 2021In the index since 9 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: 0.003; 26th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 4; of 17,781 indexed, latest versions
Container images: 8; deployed by those charts
Fix available: 4 of 4; affected packages

Security update for libzypp, zypper

Carried by container images the latest versions of 4 of 17,781 indexed charts deploy, on 8 images.

Affected package	Affected versions	Fixed in	Images
libsolvrpm	0.7.13-3.19.7, 0.7.14-3.5.1, 0.7.14-3.22.2, 0.7.16-3.29.2	0.7.17-3.40.1	8
libzypprpm	17.23.4-3.19.9, 17.24.2-3.14.1, 17.24.2-3.31.1, 17.25.1-3.34.10	17.25.5-3.25.6, 17.25.8-3.66.1	8
zypperrpm	1.14.37-3.19.1, 1.14.38-3.6.1, 1.14.38-3.22.1, 1.14.40-3.25.10	1.14.41-3.14.10, 1.14.43-3.49.1	8
libsigc++2rpm	2.10.0-3.3.1, 2.10.0-3.5.1	2.10.0-3.7.1	7

OSV records: SUSE-SU-2021:0109-1 SUSE-SU-2021:0770-1 SUSE-SU-2021:0956-1

Charts affected

4 by stars

Chart

Latest

Affected images

Radar Score

quarksquarks

7.0.1+0.g5396b11

5 of 5 See more

quarks quarks 7.0.1+0.g5396b11

5 of the 5 container images this version deploys carry CVE-2017-9271.

Container image	Digest	Package	Fixed in
ghcr.io/cfcontainerizationbot/kubecf-kubectl :v1.19.2	61daa1bba5cb	libsolv@0.7.14-3.5.1 libzypp@17.24.2-3.14.1 zypper@1.14.38-3.6.1	0.7.17-3.40.1 17.25.5-3.25.6 1.14.41-3.14.10
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1

Open the chart page →

18,197

quarks-jobquarks

0.0.124-g03faac8

1 of 1 See more

quarks-job quarks 0.0.124-g03faac8

1 of the 1 container images this version deploys carry CVE-2017-9271.

Container image	Digest	Package	Fixed in
cfcontainerization/quarks-job :v0.0.124-g03faac8	7366b11c5fa5	libsigc++2@2.10.0-3.3.1 libsolv@0.7.13-3.19.7 libzypp@17.23.4-3.19.9 zypper@1.14.37-3.19.1	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1

Open the chart page →

1,804

quarks-secretquarks

0.0.677-ga060bb6

1 of 1 See more

quarks-secret quarks 0.0.677-ga060bb6

1 of the 1 container images this version deploys carry CVE-2017-9271.

Container image	Digest	Package	Fixed in
cfcontainerization/quarks-secret :v0.0.677-ga060bb6	43131dbc0c8f	libsigc++2@2.10.0-3.3.1 libsolv@0.7.13-3.19.7 libzypp@17.23.4-3.19.9 zypper@1.14.37-3.19.1	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1

Open the chart page →

1,814

quarks-statefulsetquarks

0.0.1304-g4b4f2ac5

1 of 1 See more

quarks-statefulset quarks 0.0.1304-g4b4f2ac5

1 of the 1 container images this version deploys carry CVE-2017-9271.

Container image	Digest	Package	Fixed in
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	libsigc++2@2.10.0-3.5.1 libsolv@0.7.14-3.22.2 libzypp@17.24.2-3.31.1 zypper@1.14.38-3.22.1	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1

Open the chart page →

4,010

Container images carrying it

8 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
cfcontainerization/quarks-job :v0.0.124-g03faac8	7366b11c5fa5	libsigc++2@2.10.0-3.3.1 libsolv@0.7.13-3.19.7 libzypp@17.23.4-3.19.9 zypper@1.14.37-3.19.1	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1	1
cfcontainerization/quarks-secret :v0.0.677-ga060bb6	43131dbc0c8f	libsigc++2@2.10.0-3.3.1 libsolv@0.7.13-3.19.7 libzypp@17.23.4-3.19.9 zypper@1.14.37-3.19.1	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1	1
ghcr.io/cfcontainerizationbot/kubecf-kubectl :v1.19.2	61daa1bba5cb	libsolv@0.7.14-3.5.1 libzypp@17.24.2-3.14.1 zypper@1.14.38-3.6.1	0.7.17-3.40.1 17.25.5-3.25.6 1.14.41-3.14.10	1
ghcr.io/cloudfoundry-incubator/quarks-job :v1.0.213	760eee87f839	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1	1
ghcr.io/cloudfoundry-incubator/quarks-operator :v7.0.1-0.g5396b11	6a1432b0d503	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1	1
ghcr.io/cloudfoundry-incubator/quarks-secret :v1.0.754	f059af4de8ed	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1304-g4b4f2ac5	c7c70b527255	libsigc++2@2.10.0-3.5.1 libsolv@0.7.14-3.22.2 libzypp@17.24.2-3.31.1 zypper@1.14.38-3.22.1	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1	1
ghcr.io/cloudfoundry-incubator/quarks-statefulset :v0.0.1308-g6a8b2220	e24a9e0a21b6	libsigc++2@2.10.0-3.5.1 libsolv@0.7.16-3.29.2 libzypp@17.25.1-3.34.10 zypper@1.14.40-3.25.10	2.10.0-3.7.1 0.7.17-3.40.1 17.25.8-3.66.1 1.14.43-3.49.1	1