Insufficient exception handling in the method NCompress::NRar3::CDecoder::Code of 7-Zip before 18.00 and p7zip can lead to multiple memory corruptions within the PPMd code allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.

🗓️ 16 Dec 2021 08:00:00Reported by MicrosoftType

Insufficient exception handling in CDecoder::Code before 18.00 enables PPMd memory corruption and remote denial of service or code execution via crafted RAR archives.

Reporter	Title	Published	Views	Family All 36
FreeBSD	p7zip-codec-rar -- insufficient error handling	23 Jan 201800:00	–	freebsd
Tenable Nessus	7-Zip < 18.00 Multiple Vulnerabilities	14 May 201800:00	–	nessus
Tenable Nessus	FreeBSD : p7zip-codec-rar -- insufficient error handling (7a2e0063-0e4e-11e8-94c0-5453ed2e2b49)	12 Feb 201800:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: p7zip (CVE-2018-5996)	3 Jul 202400:00	–	nessus
Tenable Nessus	openSUSE Security Update : p7zip (openSUSE-2018-188)	21 Feb 201800:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : p7zip (SUSE-SU-2018:0464-1)	20 Feb 201800:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2018-5996	25 Aug 202500:00	–	nessus
AlpineLinux	CVE-2018-5996	31 Jan 201818:00	–	alpinelinux
CBLMariner	CVE-2018-5996 affecting package p7zip for versions less than 16.02-23	19 Mar 202417:21	–	cbl_mariner
CBLMariner	CVE-2018-5996 affecting package p7zip 16.02-22	9 Jun 202103:50	–	cbl_mariner