This vulnerability involves a path traversal issue (CWE-24) in the handling of the "path" component within .repo files processed by libzypp. Versions prior to 17.38.13 in the 17.x series and versions before 16.22.19 are affected. Exploitation could allow attackers with limited privileges to write files outside the designated zypp cache directory, potentially leading to denial of service by filling system directories. No official patch or remediation level has been confirmed in the provided data.

The vulnerability does not affect confidentiality or integrity but impacts availability by enabling attackers to fill directories outside the zypp cache with arbitrary content. This could lead to resource exhaustion or disruption of normal system operations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to .repo files and monitor for unusual file writes outside the zypp cache directory. Avoid using affected versions if possible.