15 matches found
Astra Linux – Vulnerability in unrar-nonfree
RARLAB’s UnRAR version prior to 6.12 on Linux and UNIX allowed directory traversal, enabling writing to files during an extraction operation also known as unpacking. This was demonstrated by creating a file named /.ssh/authorizedkeys. NOTE: WinRAR and Android RAR are not affected by this issue...
Astra Linux – Vulnerability in unrar-nonfree
RARLAB WinRAR Recovery Volume: Improper validation of array index leads to remote code execution vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability, as the targe...
Astra Linux – Vulnerability in unrar-nonfree
UnRAR before version 6.2.3 allowed extraction of files outside of the destination folder using symlink chains...
Astra Linux – Vulnerability in unrar-nonfree
RARLAB WinRAR prior to version 7.00, on Linux and UNIX platforms, allowed attackers to spoof the screen output or cause a denial of service, through ANSI escape sequences...
Ubuntu: Security Advisory (USN-7350-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian: Security Advisory (DLA-3542-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian dla-3542 : libunrar-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3542 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3542-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 3542-1] unrar-nonfree security update
Debian LTS Advisory DLA-3542-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 26, 2023 https://wiki.debian.org/LTS Package : unrar-nonfree Version : 1:5.6.6-1+deb10u4 CVE ID : CVE-2023-40477 A specific flaw within the processing of recovery volumes exists ...
DLA-3542-1 unrar-nonfree - security update
Bulletin has no description...
Debian: Security Advisory (DLA-3535-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-3535-1 unrar-nonfree - security update
Bulletin has no description...
Debian: Security Advisory (DLA-1003-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-1003-1 : unrar-nonfree security update
It was reported that unrar fixed a VMSFDELTA memory corruption issue in their latest version unrarsrc-5.5.5.tar.gz. This problem was reported to Sophos AV in 2012 but never reach upstream rar. For Debian 7 'Wheezy', these problems have been fixed in version 1:4.1.4-1+deb7u2. We recommend that you...
[SECURITY] [DLA 1003-1] unrar-nonfree security update
Package : unrar-nonfree Version : 1:4.1.4-1+deb7u2 CVE ID : CVE-2012-6706 Debian Bug : 865461 It was reported that unrar fixed a VMSFDELTA memory corruption issue in their latest version unrarsrc-5.5.5.tar.gz. This problem was reported to Sophos AV in 2012 but never reach upstream rar. For Debian...