CVE-2017-9731

In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package.

• CWE-200

• http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129Mailing List, Patch, Third Party Advisory
• http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129Mailing List, Patch, Third Party Advisory

Published

Jun 16, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9725In all Qualcomm products with Android releases from CAF usin…
• CVE-2017-9726The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscr…
• CVE-2017-9727The gx_ttfReader__Read function in base/gxttfb.c in Artifex …
• CVE-2017-9728In uClibc 0.9.33.2, there is an out-of-bounds read in the ge…
• CVE-2017-9729In uClibc 0.9.33.2, there is stack exhaustion (uncontrolled …
• CVE-2017-9730SQL injection vulnerability in rdr.php in nuevoMailer versio…9.8
• CVE-2017-9732The read_packet function in knc (Kerberised NetCat) before 1…
• CVE-2017-9735Jetty through 9.4.x is prone to a timing channel in util/sec…7.5
• CVE-2017-9736SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not rem…
• CVE-2017-9739The Ins_JMPR function in base/ttinterp.c in Artifex Ghostscr…
• CVE-2017-9740The xps_decode_font_char_imp function in xps/xpsfont.c in Ar…
• CVE-2017-9741install/make-config.php in ProjectSend r754 allows remote at…