rpm package
suse/unrar&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
pkg:rpm/suse/unrar&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4
Vulnerabilities (5)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-12942 | Cri | 9.8 | < 5.6.1-5.3.1 | 5.6.1-5.3.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. | |
| CVE-2017-12941 | Cri | 9.8 | < 5.6.1-5.3.1 | 5.6.1-5.3.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. | |
| CVE-2017-12940 | Cri | 9.8 | < 5.6.1-5.3.1 | 5.6.1-5.3.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. | |
| CVE-2017-12938 | Hig | 7.5 | < 5.6.1-5.3.1 | 5.6.1-5.3.1 | Aug 18, 2017 | UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file. | |
| CVE-2012-6706 | Cri | 9.8 | < 3.80.2-4.1 | 3.80.2-4.1 | Jun 22, 2017 | A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negativ |
- affected < 5.6.1-5.3.1fixed 5.6.1-5.3.1
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
- affected < 5.6.1-5.3.1fixed 5.6.1-5.3.1
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
- affected < 5.6.1-5.3.1fixed 5.6.1-5.3.1
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
- affected < 5.6.1-5.3.1fixed 5.6.1-5.3.1
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
- affected < 3.80.2-4.1fixed 3.80.2-4.1
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negativ