CVE-2017-14120

—

CVSS 3.1

7.5 high

EPSS

2%p81

Published

Sep 3, 2017 (Sep 3, 2017)

Modified

Jun 17, 2026

Description

unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.

Vendors: rarlab debian
Products: unrar, debian linux
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.