Patchwire CVEs, their patch status, and feeds to follow them

CVE-2014-9983

Fixed in a distro release EPSS 2%

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive.

Published 2017-06-04 · CVE record · OSV

Products: rarlab rar

Distro releases

ReleasePackageFixed in
Debian 12rar2:5.3.b2-1
Debian 13rar2:5.3.b2-1
Debian 14rar2:5.3.b2-1
Ubuntu 16.04 LTSrar2:5.3.b2-1