Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/rar@1:3.8b3-1
purl pkg:deb/debian/rar@1:3.8b3-1
Next non-vulnerable version 2:7.01-1~deb12u1
Latest non-vulnerable version 2:7.01-1~deb12u1
Risk 10.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-cnah-rewa-vfe5
Aliases:
CVE-2014-9983
Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive.
2:5.4.0+dfsg.1-0.1
Affected by 2 other vulnerabilities.
VCID-gjr1-fc83-dfe6
Aliases:
CVE-2022-30333
An arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.
2:6.23-1~deb11u1
Affected by 1 other vulnerability.
VCID-xz6c-axe8-8qbn
Aliases:
CVE-2023-40477
An arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.
2:6.23-1~deb11u1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T17:35:38.166670+00:00 Debian Oval Importer Affected by VCID-gjr1-fc83-dfe6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:10:43.297969+00:00 Debian Oval Importer Affected by VCID-cnah-rewa-vfe5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:37:49.654881+00:00 Debian Oval Importer Affected by VCID-xz6c-axe8-8qbn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-11T17:21:54.508598+00:00 Debian Oval Importer Affected by VCID-gjr1-fc83-dfe6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:57:15.567113+00:00 Debian Oval Importer Affected by VCID-cnah-rewa-vfe5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:25:43.147100+00:00 Debian Oval Importer Affected by VCID-xz6c-axe8-8qbn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T17:10:15.757473+00:00 Debian Oval Importer Affected by VCID-gjr1-fc83-dfe6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:46:54.846575+00:00 Debian Oval Importer Affected by VCID-cnah-rewa-vfe5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:20:11.419409+00:00 Debian Oval Importer Affected by VCID-xz6c-axe8-8qbn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0