SUSE: Security Advisory (SUSE-SU-2017:1745-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Arbitrary Code Execution

unrar-free is vulnerable to arbitrary code execution. A stack-based buffer over-read in unrarlib.c related to ExtrFile and stricomp, allows an attacker to execute arbitrary code on the host OS...

Directory Traversal

unrar is vulnerable to directory traversal. The vulnerability exists through RAR v2 archives as parsing of pathnames of the form ../filename are unpacked into the upper directory...

Debian: Security Advisory (DLA-2567-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DLA-2567-1 : unrar-free security update

Several issues have been found in unrar-free, an unarchiver for .rar files. CVE-2017-14120 This CVE is related to a directory traversal vulnerability for RAR v2 archives. CVE-2017-14121 This CVE is related to NULL pointer dereference flaw triggered by a specially crafted RAR archive. CVE-2017-141...

[SECURITY] [DLA 2567-1] unrar-free security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2567-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz February 18, 2021 https://wiki.debian.org/LTS -...

DLA-2567-1 unrar-free - security update

Bulletin has no description...

Zydra - File Password Recovery Tool And Linux Shadow File Cracker

Zydra is a file password recovery tool and Linux shadow file cracker. It uses the dictionary search or Brute force method for cracking passwords. Supported Files RAR Files Legacy ZIP Files PDF Files Linux Shadow Files zydra can find all the user’s password in the linux shadow file one after the...

unrar/unrar_fuzzer: Negative-size-param in QuickOpen::ReadRaw

Detailed report: https://oss-fuzz.com/testcase?key=6239488958267392 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: QuickOpen::ReadRaw QuickOpen::ReadNext...

unrar/unrar_fuzzer: Crash in __msan_memcpy.part.51

Detailed report: https://oss-fuzz.com/testcase?key=5766983634124800 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x72ffffffffe0 Crash State: msanmemcpy.part.51 QuickOpen::ReadRa...

unrar/unrar_fuzzer: Use-of-uninitialized-value in DosSlashToUnix

Detailed report: https://oss-fuzz.com/testcase?key=4653375479087104 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: DosSlashToUnix ExtractUnixLink50...

unrar/unrar_fuzzer: Heap-buffer-overflow in Unpack::GetChar

Detailed report: https://oss-fuzz.com/testcase?key=6587195432370176 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerasanunrar Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x62d00001c403 Crash State: Unpack::GetChar...

SUSE SLES11 Security Update : unrar (SUSE-SU-2018:0862-1)

This update for unrar to version 5.6.1 fixes several issues. These security issues were fixed : - CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...

SUSE-SU-2018:0862-1 Security update for unrar

This update for unrar to version 5.6.1 fixes several issues. These security issues were fixed: - CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file...

Debian: Security Advisory (DLA-1091-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DLA-1003-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

unrar/unrar_fuzzer: Crash in Unpack::CopyString15

Detailed report: https://oss-fuzz.com/testcase?key=5639999748833280 Project: unrar Fuzzer: aflunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: aflasanunrar Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7f1fabcf48af Crash State: Unpack::CopyString15 Unpack::Unpack15...

unrar/unrar_fuzzer: Index-out-of-bounds in Unpack::LongLZ

Detailed report: https://oss-fuzz.com/testcase?key=4683334295748608 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzerubsanunrar Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State: Unpack::LongLZ Unpack::Unpack15...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::ConvertFileHeader

Detailed report: https://oss-fuzz.com/testcase?key=5344878679556096 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::ConvertFileHeader...

unrar/unrar_fuzzer: Use-of-uninitialized-value in Archive::GetComment

Detailed report: https://oss-fuzz.com/testcase?key=4646937367150592 Project: unrar Fuzzer: libFuzzerunrarfuzzer Fuzz target binary: unrarfuzzer Job Type: libfuzzermsanunrar Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: Archive::GetComment Archive::ViewComme...