The vulnerability of the QuickOpen::ReadRaw function in the UnRAR file decompression tool allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

🗓️ 05 Apr 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

The QuickOpen::ReadRaw vulnerability in UnRAR allows buffer overflow, data exposure and outages.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2018-25018	1 Jul 202107:30	–	circl
CNNVD	UnRAR 缓冲区错误漏洞	1 Jul 202100:00	–	cnnvd
CVE	CVE-2018-25018	1 Jul 202102:54	–	cve
Cvelist	CVE-2018-25018	1 Jul 202102:54	–	cvelist
Debian CVE	CVE-2018-25018	1 Jul 202102:54	–	debiancve
EUVD	EUVD-2018-13799	7 Oct 202500:30	–	euvd
NVD	CVE-2018-25018	1 Jul 202103:15	–	nvd
OSV	DEBIAN-CVE-2018-25018	1 Jul 202103:15	–	osv
OSV	UBUNTU-CVE-2018-25018	1 Jul 202103:15	–	osv
Prion	Out-of-bounds	1 Jul 202103:15	–	prion

Vulners

Node

far_group unrarMatch6.0.3

OR

far_group unrarRange5.6.1.7–5.7.4

Source	Link
bugs	www.bugs.chromium.org/p/oss-fuzz/issues/detail
github	www.github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2018-204.yaml
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-25018
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-25018
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.6/
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20231214SE16
web	www.web.nvd.nist.gov/view/vuln/detail

26 Dec 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 38.8

CVSS 210

EPSS0.0041

QuickOpen ReadRaw UnRAR Buffer Overflow Data Exposure Outages