An arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-arch/rar | * | < 6.23 | >= 6.23 |
| app-arch/unrar | * | < 6.2.10 | >= 6.2.10 |
RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files.
Due to an error in the validation of symbolic links within archives, RAR and UnRAR can potentially write files to a directory which is outside of the intended unpack directory.
If the user running RAR or UnRAR extracts a malicious archive, the archive could overwrite a file such as the user's shell initialization scripts, potentially resulting in arbitrary code execution in the context of that user.
There is no known workaround at this time.
All RAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/rar-6.23"
All UnRAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/unrar-6.2.10"
Multiple vulnerabilities have been found in RAR and UnRAR, the worst of which may allow attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-arch/rar | * | < 5.5.0_p20170811 | >= 5.5.0_p20170811 |
| app-arch/unrar | * | < 5.5.7 | >= 5.5.7 |
RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files.
Multiple vulnerabilities have been discovered in RAR and UnRAR. Please review the referenced CVE identifiers for details.
A remote attacker, by enticing a user to open a specially crafted RAR, could possibly execute arbitrary code with the privileges of the process or cause a Denial of Service condition.
There is no known workaround at this time.
All RAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/rar-5.5.0_p20170811"
All UnRAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/unrar-5.5.7"
An integer overflow in RAR and UnRAR might allow remote attackers to execute arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-arch/rar | * | < 5.5.0_beta4_p20170628 | >= 5.5.0_beta4_p20170628 |
| app-arch/unrar | * | < 5.5.5 | >= 5.5.5 |
RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files.
A VMSF_DELTA memory corruption was discovered in which an integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the “DestPos” variable which allows writing out of bounds when setting Mem[DestPos].
A remote attacker, by enticing a user to open a specially crafted archive, could execute arbitrary code with the privileges of the process.
There is no known workaround at this time.
All RAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/rar-5.5.0_beta4_p20170628"
All UnRAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/unrar-5.5.5"
RAR and UnRAR contain a buffer overflow allowing the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| app-arch/rar | * | < 3.7.0_beta1 | >= 3.7.0_beta1 |
| app-arch/unrar | * | < 3.7.3 | >= 3.7.3 |
RAR and UnRAR provide command line interfaces for compressing and decompressing RAR files.
RAR and UnRAR contain a boundary error when processing password-protected archives that could result in a stack-based buffer overflow.
A remote attacker could entice a user to process a specially crafted password-protected archive and execute arbitrary code with the rights of the user uncompressing the archive.
There is no known workaround at this time.
All UnRAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/unrar-3.7.3"
All RAR users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-arch/rar-3.7.0_beta1"