Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2017-14121

Опубликовано: 03 сент. 2017
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 4.3
CVSS3: 5.5

Описание

The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

1:0.0.1+cvs20140707-4
cosmic

not-affected

1:0.0.1+cvs20140707-4
devel

not-affected

1:0.0.1+cvs20140707-4
disco

not-affected

1:0.0.1+cvs20140707-4
esm-apps/bionic

not-affected

1:0.0.1+cvs20140707-4
esm-apps/xenial

released

1:0.0.1+cvs20140707-4~build0.16.04.1
esm-infra-legacy/trusty

released

1:0.0.1+cvs20071127-2+deb7u1ubuntu0.1~esm1
precise/esm

DNE

trusty

ignored

end of standard support

Показывать по

EPSS

Процентиль: 41%
0.00193
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.5
nvd
больше 8 лет назад

The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.

CVSS3: 5.5
debian
больше 8 лет назад

The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free ...

CVSS3: 5.5
github
больше 3 лет назад

The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references.

EPSS

Процентиль: 41%
0.00193
Низкий

4.3 Medium

CVSS2

5.5 Medium

CVSS3