Lack of data validation - Path Traversal In unrar-free
Description
unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 debian 13 | 1:0.0.1+cvs20140707-2 | ||
debian 12 | 1:0.0.1+cvs20140707-2 | ||
debian 14 | 1:0.0.1+cvs20140707-2 |
Aliases
1. 2. 3. 4. 5.