rpm package
suse/unrar&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4
pkg:rpm/suse/unrar&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP4
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-20006 | — | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Jul 1, 2021 | UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile). | ||
| CVE-2017-12942 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. | |
| CVE-2017-12941 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. | |
| CVE-2017-12940 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. | |
| CVE-2017-12938 | Hig | 7.5 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file. | |
| CVE-2012-6706 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Jun 22, 2017 | A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negativ |
- CVE-2017-20006Jul 1, 2021affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negativ