DLA-3543-1 rar - security update

Bulletin has no description...

WinRAR Security Flaw Exploited in Zero-Day Attacks to Target Traders

A recently patched security flaw in the popular WinRAR archiving software has been exploited as a zero-day since April 2023, new findings from Group-IB reveal. The vulnerability, cataloged as CVE-2023-38831, allows threat actors to spoof file extensions, thereby making it possible to launch...

The vulnerability of the RAR4 file archiver WinRAR’s volume recovery processing system allows a hacker to execute arbitrary code.

The vulnerability of the RAR4 file archive processing system, which is used by WinRAR, relates to the ability to access memory beyond the buffer boundaries. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by causing the user to open the malicious RAR archive...

Debian dla-3534 : rar - security update

The remote Debian 10 host has a package installed that is affected by a vulnerability as referenced in the dla-3534 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3534-1 [email protected] https://www.debian.org/lts/security/...

Debian: Security Advisory (DLA-3534-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3534-1] rar security update

Debian LTS Advisory DLA-3534-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 17, 2023 https://wiki.debian.org/LTS Package : rar Version : 2:6.20-0.1deb10u1 CVE ID : CVE-2022-30333 Debian Bug : 1012228 The RAR archiver allows directory traversal to write t...

UnRAR Backlink Vulnerability

UnRAR is a command that decompresses files with rar extension. A security vulnerability exists in UnRAR versions prior to 6.2.3. An attacker exploited the vulnerability to extract files outside the target folder via symbolic links...

Debian: Security Advisory (DLA-250-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2007-3122

The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR file with a header flag value of 10, which can be processed by WinRAR...

SUSE CVE-2007-3725

The RAR VM unrarvm.c in Clam Antivirus ClamAV before 0.91 allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive, resulting in a NULL pointer dereference...

SUSE CVE-2007-3726

Integer signedness error in the SETVALUE function in rarvm.cpp in unrar 3.70 beta 3, as used in products including WinRAR and RAR for OS X, allows user-assisted remote attackers to cause a denial of service crash via a crafted RAR archive that causes a negative signed number to be cast to a large...

SUSE CVE-2008-1835

ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar...

SUSE CVE-2008-1837

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats...

SUSE CVE-2009-1241

Unspecified vulnerability in ClamAV before 0.95 allows remote attackers to bypass detection of malware via a modified RAR archive...

SUSE CVE-2011-0444

Buffer overflow in the MAC-LTE dissector epan/dissectors/packet-mac-lte.c in Wireshark 1.2.0 through 1.2.13 and 1.4.0 through 1.4.2 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number of RARs...

SUSE CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

SUSE CVE-2015-8916

bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," which allows remote attackers to cause a denial of service NULL pointer dereference and crash via a crafted rar file...

SUSE CVE-2015-8926

The archivereadformatrarreaddata function in archivereadsupportformatrar.c in libarchive before 3.2.0 allows remote attackers to cause a denial of service crash via a crafted rar archive...

SUSE CVE-2015-8934

The copyfromlzsswindow function in archivereadsupportformatrar.c in libarchive 3.2.0 and earlier allows remote attackers to cause a denial of service out-of-bounds heap read via a crafted rar file...

SUSE CVE-2016-4302

Heap-based buffer overflow in the parsecodes function in archivereadsupportformatrar.c in libarchive before 3.2.1 allows remote attackers to execute arbitrary code via a RAR file with a zero-sized dictionary...