Search for packages
| purl | pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1hu4-5cj9-aaap
Aliases: CVE-2017-12940 |
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function. |
Affected by 3 other vulnerabilities. |
|
VCID-8dqg-p1qr-aaak
Aliases: CVE-2018-25018 |
UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext. |
Affected by 3 other vulnerabilities. |
|
VCID-auxu-zugz-aaab
Aliases: CVE-2007-0855 |
Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to execute arbitrary code via a crafted, password-protected archive. |
Affected by 10 other vulnerabilities. |
|
VCID-bp4e-rpmg-aaad
Aliases: CVE-2022-30333 |
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected. |
Affected by 3 other vulnerabilities. Affected by 1 other vulnerability. |
|
VCID-fyqp-bqj9-aaaq
Aliases: CVE-2017-12941 |
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Unpack::Unpack20 function. |
Affected by 3 other vulnerabilities. |
|
VCID-pkqm-2dfr-aaak
Aliases: CVE-2022-48579 |
UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains. |
Affected by 1 other vulnerability. |
|
VCID-t6yj-dk46-aaah
Aliases: CVE-2017-20006 |
UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile). |
Affected by 3 other vulnerabilities. |
|
VCID-v4p2-8vhg-aaac
Aliases: CVE-2017-12942 |
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function. |
Affected by 3 other vulnerabilities. |
|
VCID-vxxz-hdyh-aaar
Aliases: CVE-2017-12938 |
UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . directory, a symlink to the .. directory, and a regular file. |
Affected by 3 other vulnerabilities. |
|
VCID-w1x3-c3xc-aaab
Aliases: CVE-2023-40477 |
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233. |
Affected by 1 other vulnerability. Affected by 1 other vulnerability. |
|
VCID-z9ce-vj34-aaas
Aliases: CVE-2012-6706 |
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos]. |
Affected by 3 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-21T19:05:35.640668+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:27:41.092811+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T18:20:37.621364+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.3 |
| 2025-06-21T17:56:46.113164+00:00 | Debian Oval Importer | Affected by | VCID-8dqg-p1qr-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:59:28.409977+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:53:08.926129+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T16:15:00.593586+00:00 | Debian Oval Importer | Affected by | VCID-1hu4-5cj9-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:44:32.571273+00:00 | Debian Oval Importer | Affected by | VCID-w1x3-c3xc-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T15:41:41.878060+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T14:44:47.208553+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:53:07.138753+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:34:34.411737+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T13:33:09.795674+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T12:39:45.105802+00:00 | Debian Oval Importer | Affected by | VCID-t6yj-dk46-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.3 |
| 2025-06-21T08:55:44.963759+00:00 | Debian Oval Importer | Affected by | VCID-w1x3-c3xc-aaab | None | 36.1.3 |
| 2025-06-21T08:48:16.070387+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | None | 36.1.3 |
| 2025-06-21T01:09:29.250541+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | None | 36.1.3 |
| 2025-06-20T23:45:50.735314+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | None | 36.1.3 |
| 2025-06-20T23:33:18.302870+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | None | 36.1.3 |
| 2025-06-20T23:10:06.736234+00:00 | Debian Oval Importer | Affected by | VCID-8dqg-p1qr-aaak | None | 36.1.3 |
| 2025-06-20T22:58:07.661385+00:00 | Debian Oval Importer | Affected by | VCID-1hu4-5cj9-aaap | None | 36.1.3 |
| 2025-06-20T22:41:17.823436+00:00 | Debian Oval Importer | Affected by | VCID-t6yj-dk46-aaah | None | 36.1.3 |
| 2025-06-20T22:25:57.690345+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | None | 36.1.3 |
| 2025-06-20T21:56:00.101045+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | None | 36.1.3 |
| 2025-06-20T21:38:12.750642+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | None | 36.1.3 |
| 2025-06-08T13:08:27.906282+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T12:12:35.050800+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T12:04:09.735742+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T11:34:43.320077+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:58:13.538238+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:51:32.339937+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-08T10:28:28.173453+00:00 | Debian Oval Importer | Affected by | VCID-8dqg-p1qr-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:44:33.107675+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:38:16.071040+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T09:02:04.528861+00:00 | Debian Oval Importer | Affected by | VCID-1hu4-5cj9-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:38:19.954356+00:00 | Debian Oval Importer | Affected by | VCID-w1x3-c3xc-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T08:35:49.697605+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T07:38:06.045930+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:47:23.781794+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:28:41.130811+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T06:27:13.006372+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T05:36:18.941775+00:00 | Debian Oval Importer | Affected by | VCID-t6yj-dk46-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.1.0 |
| 2025-06-08T02:42:14.019389+00:00 | Debian Oval Importer | Affected by | VCID-w1x3-c3xc-aaab | None | 36.1.0 |
| 2025-06-08T02:34:39.437450+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | None | 36.1.0 |
| 2025-06-07T18:32:07.741433+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | None | 36.1.0 |
| 2025-06-07T17:08:43.714718+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | None | 36.1.0 |
| 2025-06-07T16:56:14.061944+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | None | 36.1.0 |
| 2025-06-07T16:33:15.736463+00:00 | Debian Oval Importer | Affected by | VCID-8dqg-p1qr-aaak | None | 36.1.0 |
| 2025-06-07T16:21:22.066029+00:00 | Debian Oval Importer | Affected by | VCID-1hu4-5cj9-aaap | None | 36.1.0 |
| 2025-06-07T16:05:13.161253+00:00 | Debian Oval Importer | Affected by | VCID-t6yj-dk46-aaah | None | 36.1.0 |
| 2025-06-07T15:50:12.392255+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | None | 36.1.0 |
| 2025-06-07T15:19:21.047013+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | None | 36.1.0 |
| 2025-06-07T15:00:56.905230+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | None | 36.1.0 |
| 2025-04-12T20:20:55.122161+00:00 | Debian Oval Importer | Affected by | VCID-t6yj-dk46-aaah | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:54:03.597781+00:00 | Debian Oval Importer | Affected by | VCID-8dqg-p1qr-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:52:23.753071+00:00 | Debian Oval Importer | Affected by | VCID-1hu4-5cj9-aaap | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:30:57.564602+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T19:19:59.204435+00:00 | Debian Oval Importer | Affected by | VCID-w1x3-c3xc-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T18:56:06.848151+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:58:16.003905+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:49:34.286566+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T17:19:11.267907+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:40:58.216262+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:33:54.174431+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-12T16:09:42.088681+00:00 | Debian Oval Importer | Affected by | VCID-8dqg-p1qr-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T08:16:55.106852+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T08:10:40.570695+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:33:45.234187+00:00 | Debian Oval Importer | Affected by | VCID-1hu4-5cj9-aaap | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:09:46.681527+00:00 | Debian Oval Importer | Affected by | VCID-w1x3-c3xc-aaab | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T07:07:15.978039+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T06:10:38.637587+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:19:48.608925+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T05:00:57.799790+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:59:30.692753+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T04:07:50.614176+00:00 | Debian Oval Importer | Affected by | VCID-t6yj-dk46-aaah | https://www.debian.org/security/oval/oval-definitions-buster.xml.bz2 | 36.0.0 |
| 2025-04-08T01:09:32.973217+00:00 | Debian Oval Importer | Affected by | VCID-w1x3-c3xc-aaab | None | 36.0.0 |
| 2025-04-08T01:01:58.269060+00:00 | Debian Oval Importer | Affected by | VCID-pkqm-2dfr-aaak | None | 36.0.0 |
| 2025-04-07T17:09:48.379595+00:00 | Debian Oval Importer | Affected by | VCID-fyqp-bqj9-aaaq | None | 36.0.0 |
| 2025-04-07T15:42:17.159630+00:00 | Debian Oval Importer | Affected by | VCID-bp4e-rpmg-aaad | None | 36.0.0 |
| 2025-04-07T15:29:16.788738+00:00 | Debian Oval Importer | Affected by | VCID-vxxz-hdyh-aaar | None | 36.0.0 |
| 2025-04-07T15:05:20.850488+00:00 | Debian Oval Importer | Affected by | VCID-8dqg-p1qr-aaak | None | 36.0.0 |
| 2025-04-07T14:53:05.842370+00:00 | Debian Oval Importer | Affected by | VCID-1hu4-5cj9-aaap | None | 36.0.0 |
| 2025-04-07T14:36:24.514327+00:00 | Debian Oval Importer | Affected by | VCID-t6yj-dk46-aaah | None | 36.0.0 |
| 2025-04-07T14:21:02.647732+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | None | 36.0.0 |
| 2025-04-07T13:50:49.790071+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | None | 36.0.0 |
| 2025-04-07T13:32:51.404275+00:00 | Debian Oval Importer | Affected by | VCID-v4p2-8vhg-aaac | None | 36.0.0 |
| 2024-11-29T13:49:48.009432+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-11-26T00:31:43.467227+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 35.0.0 |
| 2024-10-14T20:35:19.399692+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-10-12T07:06:44.325562+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.2 |
| 2024-09-21T12:14:17.612875+00:00 | Debian Oval Importer | Affected by | VCID-z9ce-vj34-aaas | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |
| 2024-09-20T13:22:01.447340+00:00 | Debian Oval Importer | Affected by | VCID-auxu-zugz-aaab | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 34.0.1 |