DEBIAN-CVE-2014-9983

See a problem?
Please try reporting it to the source first.

Source

https://security-tracker.debian.org/tracker/CVE-2014-9983

Import Source

https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-9983.json

JSON Data

https://api.osv.dev/v1/vulns/DEBIAN-CVE-2014-9983

Upstream

CVE-2014-9983

Published

2017-06-04T23:29:00.187Z

Modified

2025-11-20T10:11:45.354459Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator

Summary

[none]

Details

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive.

References

https://security-tracker.debian.org/tracker/CVE-2014-9983

Affected packages

Debian:11 / rar

Package

Name: rar
Purl: pkg:deb/debian/rar?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:5.3.b2-1

Affected versions

2.*

2.02-2

2.60-1

2.80-2

3.*

3.30-2

1:3.*

1:3.5.1-1

1:3.6.0-1

1:3.7b1-1

1:3.7b1-2

1:3.7.1-1

1:3.7.1-2

1:3.8b2-1

1:3.8b2-2

1:3.8b3-1

1:3.8.0-1

1:3.8.0-2

1:3.9.b2-1

1:3.9.b3-1

2:3.*

2:3.9.0-1

2:3.9.1-1

2:3.9.2-1

2:3.9.3-1

2:4.*

2:4.0.b2-1

2:4.0.b3-1

2:4.2.0-1

2:4.2.0+dfsg.1-0.1

2:5.*

2:5.2.1b2-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-9983.json"

Debian:12 / rar

Package

Name: rar
Purl: pkg:deb/debian/rar?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:5.3.b2-1

Affected versions

2.*

2.02-2

2.60-1

2.80-2

3.*

3.30-2

1:3.*

1:3.5.1-1

1:3.6.0-1

1:3.7b1-1

1:3.7b1-2

1:3.7.1-1

1:3.7.1-2

1:3.8b2-1

1:3.8b2-2

1:3.8b3-1

1:3.8.0-1

1:3.8.0-2

1:3.9.b2-1

1:3.9.b3-1

2:3.*

2:3.9.0-1

2:3.9.1-1

2:3.9.2-1

2:3.9.3-1

2:4.*

2:4.0.b2-1

2:4.0.b3-1

2:4.2.0-1

2:4.2.0+dfsg.1-0.1

2:5.*

2:5.2.1b2-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-9983.json"

Debian:13 / rar

Package

Name: rar
Purl: pkg:deb/debian/rar?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:5.3.b2-1

Affected versions

2.*

2.02-2

2.60-1

2.80-2

3.*

3.30-2

1:3.*

1:3.5.1-1

1:3.6.0-1

1:3.7b1-1

1:3.7b1-2

1:3.7.1-1

1:3.7.1-2

1:3.8b2-1

1:3.8b2-2

1:3.8b3-1

1:3.8.0-1

1:3.8.0-2

1:3.9.b2-1

1:3.9.b3-1

2:3.*

2:3.9.0-1

2:3.9.1-1

2:3.9.2-1

2:3.9.3-1

2:4.*

2:4.0.b2-1

2:4.0.b3-1

2:4.2.0-1

2:4.2.0+dfsg.1-0.1

2:5.*

2:5.2.1b2-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-9983.json"

Debian:14 / rar

Package

Name: rar
Purl: pkg:deb/debian/rar?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2:5.3.b2-1

Affected versions

2.*

2.02-2

2.60-1

2.80-2

3.*

3.30-2

1:3.*

1:3.5.1-1

1:3.6.0-1

1:3.7b1-1

1:3.7b1-2

1:3.7.1-1

1:3.7.1-2

1:3.8b2-1

1:3.8b2-2

1:3.8b3-1

1:3.8.0-1

1:3.8.0-2

1:3.9.b2-1

1:3.9.b3-1

2:3.*

2:3.9.0-1

2:3.9.1-1

2:3.9.2-1

2:3.9.3-1

2:4.*

2:4.0.b2-1

2:4.0.b3-1

2:4.2.0-1

2:4.2.0+dfsg.1-0.1

2:5.*

2:5.2.1b2-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Database specific

source

"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2014-9983.json"