CVE-2017-9031: Path Traversal

Q: What is the severity of CVE-2017-9031?

CVE-2017-9031 has been reported as a medium severity vulnerability due to its potential for directory traversal.

Q: How do I fix CVE-2017-9031?

To fix CVE-2017-9031, upgrade Deluge to version 1.3.15 or later.

Q: What impact does CVE-2017-9031 have on my system?

CVE-2017-9031 allows an attacker to potentially access sensitive files outside the intended directories.

Q: Which versions of Deluge are affected by CVE-2017-9031?

Deluge versions prior to 1.3.15 are affected by CVE-2017-9031.

Q: Is CVE-2017-9031 exploited in the wild?

There are no public reports indicating that CVE-2017-9031 is currently being exploited in the wild.

Published May 17, 2017

Updated

The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.

Affected Software

3 affected componentsFixes available

Deluge-torrent Deluge<=1.3.14

ubuntu/deluge*

debian/deluge

2.0.3-42.2.0-12.2.1~dev0+20260307-2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/deluge to a version that resolves this vulnerability.
Fixed in 2.0.3-4Fixed in 2.2.0-1Fixed in 2.2.1~dev0+20260307-2
Upgrade
Upgrade ubuntu/deluge to a version that resolves this vulnerability.
Fixed in 1.3.12-1ubuntu1+esm1

Event History

May 17, 2017

CVE Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·07:29 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

DSA-3856

Peer vulnerabilities

Found alongside the following vulnerabilities.

DLA-943-1

Frequently Asked Questions

What is the severity of CVE-2017-9031?

CVE-2017-9031 has been reported as a medium severity vulnerability due to its potential for directory traversal.

How do I fix CVE-2017-9031?

To fix CVE-2017-9031, upgrade Deluge to version 1.3.15 or later.

What impact does CVE-2017-9031 have on my system?

CVE-2017-9031 allows an attacker to potentially access sensitive files outside the intended directories.

Which versions of Deluge are affected by CVE-2017-9031?

Deluge versions prior to 1.3.15 are affected by CVE-2017-9031.

Is CVE-2017-9031 exploited in the wild?

There are no public reports indicating that CVE-2017-9031 is currently being exploited in the wild.

CVE-2017-9031: Path Traversal

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2017-9031?

How do I fix CVE-2017-9031?

What impact does CVE-2017-9031 have on my system?

Which versions of Deluge are affected by CVE-2017-9031?

Is CVE-2017-9031 exploited in the wild?

Company

Resources

Contact