Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/rar@2:5.4.0%2Bdfsg.1-0.1
purl pkg:deb/debian/rar@2:5.4.0%2Bdfsg.1-0.1
Next non-vulnerable version 2:7.01-1~deb12u1
Latest non-vulnerable version 2:7.01-1~deb12u1
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-gjr1-fc83-dfe6
Aliases:
CVE-2022-30333
An arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.
2:6.23-1~deb11u1
Affected by 1 other vulnerability.
VCID-xz6c-axe8-8qbn
Aliases:
CVE-2023-40477
An arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.
2:6.23-1~deb11u1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-cnah-rewa-vfe5 Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive. CVE-2014-9983

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-15T17:35:38.187556+00:00 Debian Oval Importer Affected by VCID-gjr1-fc83-dfe6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T17:10:43.316026+00:00 Debian Oval Importer Fixing VCID-cnah-rewa-vfe5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:37:49.672361+00:00 Debian Oval Importer Affected by VCID-xz6c-axe8-8qbn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-11T17:21:54.528579+00:00 Debian Oval Importer Affected by VCID-gjr1-fc83-dfe6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:57:15.586604+00:00 Debian Oval Importer Fixing VCID-cnah-rewa-vfe5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:25:43.168589+00:00 Debian Oval Importer Affected by VCID-xz6c-axe8-8qbn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T17:10:15.777369+00:00 Debian Oval Importer Affected by VCID-gjr1-fc83-dfe6 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T16:46:54.869851+00:00 Debian Oval Importer Fixing VCID-cnah-rewa-vfe5 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:20:11.446536+00:00 Debian Oval Importer Affected by VCID-xz6c-axe8-8qbn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0