CVE-2017-12940
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the Enco ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD.
Beschreibung
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | unrar-nonfree | 1:5.5.8-1 |
| debian 12 | unrar-nonfree | 1:5.5.8-1 |
| debian 13 | unrar-nonfree | 1:5.5.8-1 |
| debian 14 | unrar-nonfree | 1:5.5.8-1 |
| debian 7 | unrar-nonfree | kein Fix angegeben |
| debian 8 | unrar-nonfree | kein Fix angegeben |
| debian 9 | unrar-nonfree | kein Fix angegeben |
| echo | unrar-nonfree | 1:5.5.8-1 |
| rapidfort fedora 43 | unrar, unrar-free | 0.3.3-2.fc43 |
| rapidfort Oracle Linux 10 | unrar | kein Fix angegeben |
| rapidfort Oracle Linux 9 | unrar | kein Fix angegeben |
Alle 12 Einträge aus 11 Quellen zeigen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | unrar-nonfree | 1:5.5.8-1 |
| debian 12 | unrar-nonfree | 1:5.5.8-1 |
| debian 13 | unrar-nonfree | 1:5.5.8-1 |
| debian 14 | unrar-nonfree | 1:5.5.8-1 |
| debian 7 | unrar-nonfree | kein Fix angegeben |
| debian 8 | unrar-nonfree | kein Fix angegeben |
| debian 9 | unrar-nonfree | kein Fix angegeben |
| echo | unrar-nonfree | 1:5.5.8-1 |
| rapidfort fedora 43 | unrar | 0.3.3-2.fc43 |
| rapidfort fedora 43 | unrar-free | 0.3.3-2.fc43 |
| rapidfort Oracle Linux 10 | unrar | kein Fix angegeben |
| rapidfort Oracle Linux 9 | unrar | kein Fix angegeben |