CVE-2017-12938 — Path Traversal in Unrar

CWE-22 — Path TraversalCWE-416 — Use After Free8 documents7 sources
Severity
7.5HIGHNVD
EPSS
0.9%
top 24.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Rarlab Unrar
Timeline
PublishedAug 18
Latest updateMay 17

Description

UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

▶NVDrarlab/unrar5.5.6

🔴Vulnerability Details

3
GHSA
GHSA-hc8j-qhm9-c5f4: UnRAR before 5↗2022-05-17
▶
OSV
CVE-2017-12938: UnRAR before 5↗2017-08-18
▶
CVEList
CVE-2017-12938: UnRAR before 5↗2017-08-18
▶

📋Vendor Advisories

2
Red Hat
openslp: Double free in slp_buffer:SLPBufferRealloc() may allow a remote attacker to execute arbitrary code↗2018-06-28
▶
Debian
CVE-2017-12938: unrar-nonfree - UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal prote...↗2017
▶

💬Community

1
Bugzilla
CVE-2018-12938 openslp: Double free in slp_buffer:SLPBufferRealloc() may allow a remote attacker to execute arbitrary code↗2018-06-29
▶
CVE-2017-12938 — Path Traversal in Rarlab Unrar | cvebase