CVE-2012-6706
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, a ...
Kaynağa göre önem derecesi
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD. Daha düşük diyenler: Amazon (orta), Ubuntu (orta).
Açıklama
A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the "DestPos" variable, which allows the attacker to write out of bounds when setting Mem[DestPos].
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | clamav | 0.99.4-r0 |
| alpine 3.11 | clamav | 0.99.4-r0 |
| alpine 3.12 | clamav | 0.99.4-r0 |
| alpine 3.13 | clamav | 0.99.4-r0 |
| alpine 3.14 | clamav | 0.99.4-r0 |
| alpine 3.15 | clamav | 0.99.4-r0 |
| alpine 3.16 | clamav | 0.99.4-r0 |
| alpine 3.17 | clamav | 0.99.4-r0 |
| alpine 3.18 | clamav | 0.99.4-r0 |
| alpine 3.19 | clamav | 0.99.4-r0 |
| alpine 3.20 | clamav | 0.99.4-r0 |
| alpine 3.21 | clamav | 0.99.4-r0 |
38 kaynaktaki 64 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| alpine 3.10 | clamav | 0.99.4-r0 |
| alpine 3.11 | clamav | 0.99.4-r0 |
| alpine 3.12 | clamav | 0.99.4-r0 |
| alpine 3.13 | clamav | 0.99.4-r0 |
| alpine 3.14 | clamav | 0.99.4-r0 |
| alpine 3.15 | clamav | 0.99.4-r0 |
| alpine 3.16 | clamav | 0.99.4-r0 |
| alpine 3.17 | clamav | 0.99.4-r0 |
| alpine 3.18 | clamav | 0.99.4-r0 |
| alpine 3.19 | clamav | 0.99.4-r0 |
| alpine 3.20 | clamav | 0.99.4-r0 |
| alpine 3.21 | clamav | 0.99.4-r0 |
| alpine 3.22 | clamav | 0.99.4-r0 |
| alpine 3.23 | clamav | 0.99.4-r0 |
| alpine 3.24 | clamav | 0.99.4-r0 |
| alpine 3.8 | clamav | 0.99.4-r0 |
| alpine 3.9 | clamav | 0.99.4-r0 |
| alpine edge | clamav | 0.99.4-r0 |
| amazon linux 1 | clamav | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-data | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-data-empty | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-db | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-debuginfo | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-devel | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-filesystem | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-lib | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-milter | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-milter-sysvinit | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-scanner | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-scanner-sysvinit | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-server | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-server-sysvinit | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamav-update | 0.99.4-1.29.amzn1 |
| amazon linux 1 | clamd | 0.99.4-1.29.amzn1 |
| debian 11 | libclamunrar | 0.99-4 |
| debian 11 | unrar-nonfree | 1:5.5.5-1 |
| debian 12 | libclamunrar | 0.99-4 |
| debian 12 | unrar-nonfree | 1:5.5.5-1 |
| debian 13 | libclamunrar | 0.99-4 |
| debian 13 | unrar-nonfree | 1:5.5.5-1 |
| debian 14 | libclamunrar | 0.99-4 |
| debian 14 | unrar-nonfree | 1:5.5.5-1 |
| debian 7 | libclamunrar | 0.99-0+deb7u2 |
| debian 7 | unrar-nonfree | 1:4.1.4-1+deb7u2 |
| debian 8 | libclamunrar | 0.99-0+deb8u3 |
| debian 8 | unrar-nonfree | 1:5.2.7-0.1+deb8u1 |
| debian 9 | libclamunrar | 0.99-3+deb9u1 |
| debian 9 | unrar-nonfree | 1:5.3.2-1+deb9u1 |
| echo | libclamunrar | 0.99-4 |
| echo | unrar-nonfree | 1:5.5.5-1 |
| rapidfort fedora 43 | unrar | 0.3.3-2.fc43 |
| rapidfort fedora 43 | unrar-free | 0.3.3-2.fc43 |
| rapidfort Oracle Linux 10 | unrar | düzeltme belirtilmemiş |
| rapidfort Oracle Linux 9 | unrar | düzeltme belirtilmemiş |
| ubuntu 14.04 | libclamunrar | 0.99-0ubuntu0.14.04.2 |
| ubuntu 16.04 | libclamunrar | 0.99-1ubuntu0.1 |
| ubuntu 16.04 | unrar-nonfree | 1:5.3.2-1+deb9u1build0.16.04.1 |
| ubuntu 16.04-ESM | libclamunrar | 0.99-1ubuntu0.1 |
| ubuntu 16.04-ESM | unrar-nonfree | 1:5.3.2-1+deb9u1build0.16.04.1 |
| ubuntu 17.10 | libclamunrar | 0.99-4ubuntu1 |
| ubuntu 18.04 | libclamunrar | 0.99-4ubuntu1 |
| ubuntu 18.04-ESM | libclamunrar | 0.99-4ubuntu1 |
| ubuntu 18.10 | libclamunrar | 0.99-4ubuntu1 |
| ubuntu 19.04 | libclamunrar | 0.99-4ubuntu1 |
Referanslar
- http://securitytracker.com/id?1027725
- http://telussecuritylabs.com/threats/show/TSL20121207-01
- http://www.openwall.com/lists/oss-security/2017/06/21/9
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1286
- https://bugs.chromium.org/p/project-zero/issues/detail?id=1286&desc=6
- https://community.sophos.com/kb/en-us/118424#six
- https://kc.mcafee.com/corporate/index?page=content&id=SB10205
- https://lock.cmpxchg8b.com/sophailv2.pdf