VYPR
Critical severity9.9NVD Advisory· Published Mar 1, 2018· Updated Jun 17, 2026

CVE-2017-14804

CVE-2017-14804

Description

The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroots.

Affected products

17

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.