CVE-2017-6306: Path Traversal
Published Feb 24, 2017
·Updated
An issue was discovered in ytnef before 1.9.1. This is related to a patch described as "9 of 9. Directory Traversal using the filename; SanitizeFilename function in settings.c."
Affected Software
3 affected components
Ytnef Project Ytnef<=1.9
Debian Debian Linux=8.0
Debian Debian Linux=9.0
Event History
Feb 24, 2017
CVE Published
via MITRE·04:23 AM
Data Sourced
via MITRE·04:23 AM
Description
Data Sourced
via NVD·04:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-6306?
CVE-2017-6306 is classified as a medium severity vulnerability due to its directory traversal exploitation risk.
2
How do I fix CVE-2017-6306?
To fix CVE-2017-6306, you should upgrade to ytnef version 1.9.1 or later.
3
What is the impact of CVE-2017-6306?
CVE-2017-6306 can allow an attacker to exploit directory traversal issues, potentially accessing unauthorized files.
4
Which versions of ytnef are affected by CVE-2017-6306?
Versions of ytnef prior to 1.9.1 are affected by CVE-2017-6306.
5
Which operating systems are affected by CVE-2017-6306?
Debian Linux versions 8.0 and 9.0 are among the operating systems affected by CVE-2017-6306.