CVE-2017-14121 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-14121 Interim 1 33 2023-02-10T02:08:34Z current 2021-05-30T14:01:44Z 2023-02-10T02:08:34Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-14121 The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Server 11 SP3 LTSS SUSE Linux Enterprise Server 11 SP3 for Teradata SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15-ESPOS SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Business Critical Linux 15 SP1 SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Manager Proxy 4.0 SUSE Manager Retail Branch Server 4.0 SUSE Manager Server 4.0 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 ImageMagick cron libmysqlclient18 libmysqlclient18-32bit libmysqlclient_r18 libmysqlclient_r18-32bit libmysqld-devel libmysqld19 libunrar-devel libunrar5_0_14 mariadb mariadb-100 mariadb-100-errormessages mariadb-client mariadb-errormessages mariadb-galera mariadb-tools mysql unrar libmysqlclient18 as a component of HPE Helion OpenStack 8 libmysqlclient18-32bit as a component of HPE Helion OpenStack 8 mariadb as a component of HPE Helion OpenStack 8 mariadb-client as a component of HPE Helion OpenStack 8 mariadb-errormessages as a component of HPE Helion OpenStack 8 mariadb-galera as a component of HPE Helion OpenStack 8 mariadb-tools as a component of HPE Helion OpenStack 8 libmysqld-devel as a component of SUSE CaaS Platform 4.0 libmysqld19 as a component of SUSE CaaS Platform 4.0 mariadb as a component of SUSE CaaS Platform 4.0 mariadb-client as a component of SUSE CaaS Platform 4.0 mariadb-errormessages as a component of SUSE CaaS Platform 4.0 mariadb-tools as a component of SUSE CaaS Platform 4.0 mariadb as a component of SUSE Enterprise Storage 6 unrar as a component of SUSE Linux Enterprise Desktop 12 SP3 mariadb-100 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 libmysqld-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libmysqld19 as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mariadb as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mariadb-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mariadb-errormessages as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS mariadb-tools as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS libmysqld-devel as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS libmysqld19 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb-client as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb-errormessages as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS mariadb-tools as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS cron as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata unrar as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata cron as a component of SUSE Linux Enterprise Server 11 SP3 LTSS unrar as a component of SUSE Linux Enterprise Server 11 SP3 LTSS cron as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata mysql as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata unrar as a component of SUSE Linux Enterprise Server 11 SP3 for Teradata ImageMagick as a component of SUSE Linux Enterprise Server 11 SP4 LTSS cron as a component of SUSE Linux Enterprise Server 11 SP4-LTSS unrar as a component of SUSE Linux Enterprise Server 11 SP4-LTSS unrar as a component of SUSE Linux Enterprise Server 12 SP1-LTSS unrar as a component of SUSE Linux Enterprise Server 12 SP2 libmysqlclient18 as a component of SUSE Linux Enterprise Server 12 SP2-BCL libmysqlclient18-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL mariadb as a component of SUSE Linux Enterprise Server 12 SP2-BCL mariadb-client as a component of SUSE Linux Enterprise Server 12 SP2-BCL mariadb-errormessages as a component of SUSE Linux Enterprise Server 12 SP2-BCL mariadb-tools as a component of SUSE Linux Enterprise Server 12 SP2-BCL unrar as a component of SUSE Linux Enterprise Server 12 SP3 libmysqlclient18 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libmysqlclient18-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS mariadb-100-errormessages as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS mariadb-100 as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS libmysqlclient18 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmysqlclient18-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-100-errormessages as a component of SUSE Linux Enterprise Server 12 SP4-LTSS mariadb-100 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS unrar as a component of SUSE Linux Enterprise Server 12 SP4-LTSS libmysqlclient18 as a component of SUSE Linux Enterprise Server 12 SP5 libmysqlclient18-32bit as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-100-errormessages as a component of SUSE Linux Enterprise Server 12 SP5 mariadb-100 as a component of SUSE Linux Enterprise Server 12 SP5 unrar as a component of SUSE Linux Enterprise Server 12-LTSS libmysqld-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS libmysqld19 as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mariadb as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mariadb-client as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mariadb-errormessages as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mariadb-tools as a component of SUSE Linux Enterprise Server 15 SP1-LTSS mariadb as a component of SUSE Linux Enterprise Server 15-ESPOS libmysqld-devel as a component of SUSE Linux Enterprise Server 15-LTSS libmysqld19 as a component of SUSE Linux Enterprise Server 15-LTSS mariadb as a component of SUSE Linux Enterprise Server 15-LTSS mariadb-client as a component of SUSE Linux Enterprise Server 15-LTSS mariadb-errormessages as a component of SUSE Linux Enterprise Server 15-LTSS mariadb-tools as a component of SUSE Linux Enterprise Server 15-LTSS mariadb as a component of SUSE Linux Enterprise Server Business Critical Linux 15 SP1 mariadb as a component of SUSE Linux Enterprise Server Teradata 12 SP3 libmysqlclient18 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 libmysqlclient18-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-100-errormessages as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-100 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 mariadb-100 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 libmysqld-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmysqld19 as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb-errormessages as a component of SUSE Linux Enterprise Server for SAP Applications 15 mariadb-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 libmysqld-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libmysqld19 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mariadb as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mariadb-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mariadb-errormessages as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 mariadb-tools as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 libunrar-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libunrar5_0_14 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 unrar as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 libunrar-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libunrar5_0_14 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 unrar as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 libmysqlclient_r18 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 libmysqlclient_r18-32bit as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 mariadb-100 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 mariadb as a component of SUSE Manager Proxy 4.0 mariadb as a component of SUSE Manager Retail Branch Server 4.0 mariadb as a component of SUSE Manager Server 4.0 libmysqlclient18 as a component of SUSE OpenStack Cloud 8 libmysqlclient18-32bit as a component of SUSE OpenStack Cloud 8 mariadb as a component of SUSE OpenStack Cloud 8 mariadb-client as a component of SUSE OpenStack Cloud 8 mariadb-errormessages as a component of SUSE OpenStack Cloud 8 mariadb-galera as a component of SUSE OpenStack Cloud 8 mariadb-tools as a component of SUSE OpenStack Cloud 8 libmysqlclient18 as a component of SUSE OpenStack Cloud 9 libmysqlclient18-32bit as a component of SUSE OpenStack Cloud 9 mariadb-100-errormessages as a component of SUSE OpenStack Cloud 9 mariadb-100 as a component of SUSE OpenStack Cloud 9 libmysqlclient18 as a component of SUSE OpenStack Cloud Crowbar 8 libmysqlclient18-32bit as a component of SUSE OpenStack Cloud Crowbar 8 mariadb as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-client as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-errormessages as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-galera as a component of SUSE OpenStack Cloud Crowbar 8 mariadb-tools as a component of SUSE OpenStack Cloud Crowbar 8 libmysqlclient18 as a component of SUSE OpenStack Cloud Crowbar 9 libmysqlclient18-32bit as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-100-errormessages as a component of SUSE OpenStack Cloud Crowbar 9 mariadb-100 as a component of SUSE OpenStack Cloud Crowbar 9 The DecodeNumber function in unrarlib.c in unrar 0.0.1 (aka unrar-free or unrar-gpl) suffers from a NULL pointer dereference flaw triggered by a crafted RAR archive. NOTE: this may be the same as one of the several test cases in the CVE-2017-11189 references. CVE-2017-14121 SUSE CaaS Platform 4.0:libmysqld-devel SUSE CaaS Platform 4.0:libmysqld19 SUSE CaaS Platform 4.0:mariadb SUSE CaaS Platform 4.0:mariadb-client SUSE CaaS Platform 4.0:mariadb-errormessages SUSE CaaS Platform 4.0:mariadb-tools SUSE Enterprise Storage 6:mariadb SUSE Linux Enterprise Desktop 12 SP3:unrar SUSE Linux Enterprise High Performance Computing 12 SP5:mariadb-100 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libmysqld-devel SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:libmysqld19 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:mariadb SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:mariadb-client SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:mariadb-errormessages SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:mariadb-tools SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld-devel SUSE Linux Enterprise High Performance Computing 15-LTSS:libmysqld19 SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-client SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-errormessages SUSE Linux Enterprise High Performance Computing 15-LTSS:mariadb-tools SUSE Linux Enterprise Server 11 SP1 for Teradata:cron SUSE Linux Enterprise Server 11 SP1 for Teradata:unrar SUSE Linux Enterprise Server 11 SP3 LTSS:cron SUSE Linux Enterprise Server 11 SP3 LTSS:unrar SUSE Linux Enterprise Server 11 SP3 for Teradata:cron SUSE Linux Enterprise Server 11 SP3 for Teradata:unrar SUSE Linux Enterprise Server 11 SP4-LTSS:cron SUSE Linux Enterprise Server 11 SP4-LTSS:unrar SUSE Linux Enterprise Server 12 SP1-LTSS:unrar SUSE Linux Enterprise Server 12 SP2:unrar SUSE Linux Enterprise Server 12 SP3:unrar SUSE Linux Enterprise Server 12 SP4-ESPOS:libmysqlclient18 SUSE Linux Enterprise Server 12 SP4-ESPOS:libmysqlclient18-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:mariadb-100 SUSE Linux Enterprise Server 12 SP4-ESPOS:mariadb-100-errormessages SUSE Linux Enterprise Server 12 SP4-LTSS:libmysqlclient18 SUSE Linux Enterprise Server 12 SP4-LTSS:libmysqlclient18-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-100 SUSE Linux Enterprise Server 12 SP4-LTSS:mariadb-100-errormessages SUSE Linux Enterprise Server 12 SP5:libmysqlclient18 SUSE Linux Enterprise Server 12 SP5:libmysqlclient18-32bit SUSE Linux Enterprise Server 12 SP5:mariadb-100 SUSE Linux Enterprise Server 12 SP5:mariadb-100-errormessages SUSE Linux Enterprise Server 12-LTSS:unrar SUSE Linux Enterprise Server 15 SP1-LTSS:libmysqld-devel SUSE Linux Enterprise Server 15 SP1-LTSS:libmysqld19 SUSE Linux Enterprise Server 15 SP1-LTSS:mariadb SUSE Linux Enterprise Server 15 SP1-LTSS:mariadb-client SUSE Linux Enterprise Server 15 SP1-LTSS:mariadb-errormessages SUSE Linux Enterprise Server 15 SP1-LTSS:mariadb-tools SUSE Linux Enterprise Server 15-ESPOS:mariadb SUSE Linux Enterprise Server 15-LTSS:libmysqld-devel SUSE Linux Enterprise Server 15-LTSS:libmysqld19 SUSE Linux Enterprise Server 15-LTSS:mariadb SUSE Linux Enterprise Server 15-LTSS:mariadb-client SUSE Linux Enterprise Server 15-LTSS:mariadb-errormessages SUSE Linux Enterprise Server 15-LTSS:mariadb-tools SUSE Linux Enterprise Server Business Critical Linux 15 SP1:mariadb SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmysqlclient18 SUSE Linux Enterprise Server for SAP Applications 12 SP4:libmysqlclient18-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-100 SUSE Linux Enterprise Server for SAP Applications 12 SP4:mariadb-100-errormessages SUSE Linux Enterprise Server for SAP Applications 12 SP5:mariadb-100 SUSE Linux Enterprise Server for SAP Applications 15 SP1:libmysqld-devel SUSE Linux Enterprise Server for SAP Applications 15 SP1:libmysqld19 SUSE Linux Enterprise Server for SAP Applications 15 SP1:mariadb SUSE Linux Enterprise Server for SAP Applications 15 SP1:mariadb-client SUSE Linux Enterprise Server for SAP Applications 15 SP1:mariadb-errormessages SUSE Linux Enterprise Server for SAP Applications 15 SP1:mariadb-tools SUSE Linux Enterprise Server for SAP Applications 15:libmysqld-devel SUSE Linux Enterprise Server for SAP Applications 15:libmysqld19 SUSE Linux Enterprise Server for SAP Applications 15:mariadb SUSE Linux Enterprise Server for SAP Applications 15:mariadb-client SUSE Linux Enterprise Server for SAP Applications 15:mariadb-errormessages SUSE Linux Enterprise Server for SAP Applications 15:mariadb-tools SUSE Linux Enterprise Software Development Kit 12 SP2:libunrar-devel SUSE Linux Enterprise Software Development Kit 12 SP2:libunrar5_0_14 SUSE Linux Enterprise Software Development Kit 12 SP2:unrar SUSE Linux Enterprise Software Development Kit 12 SP3:libunrar-devel SUSE Linux Enterprise Software Development Kit 12 SP3:libunrar5_0_14 SUSE Linux Enterprise Software Development Kit 12 SP3:unrar SUSE Linux Enterprise Workstation Extension 12 SP5:libmysqlclient_r18 SUSE Linux Enterprise Workstation Extension 12 SP5:libmysqlclient_r18-32bit SUSE Linux Enterprise Workstation Extension 12 SP5:mariadb-100 SUSE Manager Proxy 4.0:mariadb SUSE Manager Retail Branch Server 4.0:mariadb SUSE Manager Server 4.0:mariadb SUSE OpenStack Cloud 9:libmysqlclient18 SUSE OpenStack Cloud 9:libmysqlclient18-32bit SUSE OpenStack Cloud 9:mariadb-100 SUSE OpenStack Cloud 9:mariadb-100-errormessages SUSE OpenStack Cloud Crowbar 9:libmysqlclient18 SUSE OpenStack Cloud Crowbar 9:libmysqlclient18-32bit SUSE OpenStack Cloud Crowbar 9:mariadb-100 SUSE OpenStack Cloud Crowbar 9:mariadb-100-errormessages HPE Helion OpenStack 8:libmysqlclient18 HPE Helion OpenStack 8:libmysqlclient18-32bit HPE Helion OpenStack 8:mariadb HPE Helion OpenStack 8:mariadb-client HPE Helion OpenStack 8:mariadb-errormessages HPE Helion OpenStack 8:mariadb-galera HPE Helion OpenStack 8:mariadb-tools SUSE Linux Enterprise Server 11 SP3 for Teradata:mysql SUSE Linux Enterprise Server 11 SP4 LTSS:ImageMagick SUSE Linux Enterprise Server 12 SP2-BCL:libmysqlclient18 SUSE Linux Enterprise Server 12 SP2-BCL:libmysqlclient18-32bit SUSE Linux Enterprise Server 12 SP2-BCL:mariadb SUSE Linux Enterprise Server 12 SP2-BCL:mariadb-client SUSE Linux Enterprise Server 12 SP2-BCL:mariadb-errormessages SUSE Linux Enterprise Server 12 SP2-BCL:mariadb-tools SUSE Linux Enterprise Server 12 SP4-LTSS:unrar SUSE Linux Enterprise Server Teradata 12 SP3:mariadb SUSE OpenStack Cloud 8:libmysqlclient18 SUSE OpenStack Cloud 8:libmysqlclient18-32bit SUSE OpenStack Cloud 8:mariadb SUSE OpenStack Cloud 8:mariadb-client SUSE OpenStack Cloud 8:mariadb-errormessages SUSE OpenStack Cloud 8:mariadb-galera SUSE OpenStack Cloud 8:mariadb-tools SUSE OpenStack Cloud Crowbar 8:libmysqlclient18 SUSE OpenStack Cloud Crowbar 8:libmysqlclient18-32bit SUSE OpenStack Cloud Crowbar 8:mariadb SUSE OpenStack Cloud Crowbar 8:mariadb-client SUSE OpenStack Cloud Crowbar 8:mariadb-errormessages SUSE OpenStack Cloud Crowbar 8:mariadb-galera SUSE OpenStack Cloud Crowbar 8:mariadb-tools low 4.3 AV:N/AC:M/Au:N/C:N/I:N/A:P 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H