CVE-2024-33899

2024-04-2900:15:07

Debian Security Bug Tracker

security-tracker.debian.org

rarlab

winrar

screen spoofing

denial of service

ansi escape sequences

linux

unix

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

Low

JSON

RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.

OSVersionArchitecturePackageVersionFilename
Debian12allrar<= 2:6.23-1~deb12u1rar_2:6.23-1~deb12u1_all.deb
Debian11allrar<= 2:6.23-1~deb11u1rar_2:6.23-1~deb11u1_all.deb
Debian999allrar< 2:7.00-1rar_2:7.00-1_all.deb
Debian13allrar< 2:7.00-1rar_2:7.00-1_all.deb
Debian12allunrar-nonfree<= 1:6.2.6-1+deb12u1unrar-nonfree_1:6.2.6-1+deb12u1_all.deb
Debian11allunrar-nonfree<= 1:6.0.3-1+deb11u3unrar-nonfree_1:6.0.3-1+deb11u3_all.deb
Debian999allunrar-nonfree< 1:7.0.3-1unrar-nonfree_1:7.0.3-1_all.deb
Debian13allunrar-nonfree< 1:7.0.3-1unrar-nonfree_1:7.0.3-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	rar	<= 2:6.23-1~deb12u1	rar_2:6.23-1~deb12u1_all.deb
Debian	11	all	rar	<= 2:6.23-1~deb11u1	rar_2:6.23-1~deb11u1_all.deb
Debian	999	all	rar	< 2:7.00-1	rar_2:7.00-1_all.deb
Debian	13	all	rar	< 2:7.00-1	rar_2:7.00-1_all.deb
Debian	12	all	unrar-nonfree	<= 1:6.2.6-1+deb12u1	unrar-nonfree_1:6.2.6-1+deb12u1_all.deb
Debian	11	all	unrar-nonfree	<= 1:6.0.3-1+deb11u3	unrar-nonfree_1:6.0.3-1+deb11u3_all.deb
Debian	999	all	unrar-nonfree	< 1:7.0.3-1	unrar-nonfree_1:7.0.3-1_all.deb
Debian	13	all	unrar-nonfree	< 1:7.0.3-1	unrar-nonfree_1:7.0.3-1_all.deb