CVE-2017-14120: Debian Linux
High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.
unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a directory traversal vulnerability for RAR v2 archives: pathnames of the form ../[filename] are unpacked into the upper directory.
Affected products
Published 2017-09-03. Last modified 2026-06-17.