rpm package
suse/unrar&distro=SUSE Linux Enterprise Software Development Kit 12 SP5
pkg:rpm/suse/unrar&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
Vulnerabilities (8)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-33899 | — | < 5.6.1-4.11.1 | 5.6.1-4.11.1 | Apr 28, 2024 | RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences. | ||
| CVE-2022-30333 | — | KEV | < 5.6.1-4.8.1 | 5.6.1-4.8.1 | May 9, 2022 | RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected. | |
| CVE-2017-20006 | — | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Jul 1, 2021 | UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile). | ||
| CVE-2017-12942 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. | |
| CVE-2017-12941 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. | |
| CVE-2017-12940 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. | |
| CVE-2017-12938 | Hig | 7.5 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Aug 18, 2017 | UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file. | |
| CVE-2012-6706 | Cri | 9.8 | < 5.6.1-4.5.1 | 5.6.1-4.5.1 | Jun 22, 2017 | A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negativ |
- CVE-2024-33899Apr 28, 2024affected < 5.6.1-4.11.1fixed 5.6.1-4.11.1
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
- affected < 5.6.1-4.8.1fixed 5.6.1-4.8.1
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
- CVE-2017-20006Jul 1, 2021affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file.
- affected < 5.6.1-4.5.1fixed 5.6.1-4.5.1
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negativ