CVE-2017-9731

7.5 highEPSS 1.1%

High (7.5) in yocto project yp core-pyro. EPSS 1.1% chance of exploitation in the next 30 days.

In meta/classes/package_ipk.bbclass in Poky in poky-pyro 17.0.0 for Yocto Project through YP Core - Pyro 2.3, attackers can obtain sensitive information by reading a URL in a Source entry in an ipk package.

Severity

CVSS 3.0

7.5 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-06-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

yocto_project:yp_core-pyro

References

http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129
http://git.yoctoproject.org/cgit/cgit.cgi/poky/patch/?id=f01b909a266498853e6b3f10e6b39f2d95148129

Check your stack JSON