CVE-2017-12940 libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
CriticalCVSS 9.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libunrar.a in UnRAR before 5.5.7 has an out-of-bounds read in the EncodeFileName::Decode call within the Archive::ReadHeader15 function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/unrar-nonfree(Debian:12) | < 1:5.5.8-1 | 1:5.5.8-1 |
| debian/unrar-nonfree(Debian:12) | = 1:3.5.2-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.5.2-0.2 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.5.4-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.5.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.5.4-1.1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.7.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.7.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.7.3-1.1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.7.8-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.7.8-2 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.8.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.8.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.8.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.8.5-2 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.9.10-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.9.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.9.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.9.6-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.9.7-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:3.9.9-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:4.0.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:4.0.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:4.1.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:4.2.4-0.1 | No fix listed |
Show 84 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/unrar-nonfree(Debian:12) | = 1:4.2.4-0.2 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:4.2.4-0.3 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:5.0.10-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:5.2.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:5.2.7-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:5.3.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:5.4.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 1:5.5.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 3.3.6-2 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 3.3.6-2.0.1 | No fix listed |
| debian/unrar-nonfree(Debian:12) | = 3.4.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | < 1:5.5.8-1 | 1:5.5.8-1 |
| debian/unrar-nonfree(Debian:13) | = 1:3.5.2-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.5.2-0.2 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.5.4-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.5.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.5.4-1.1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.7.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.7.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.7.3-1.1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.7.8-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.7.8-2 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.8.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.8.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.8.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.8.5-2 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.9.10-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.9.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.9.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.9.6-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.9.7-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:3.9.9-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:4.0.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:4.0.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:4.1.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:4.2.4-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:4.2.4-0.2 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:4.2.4-0.3 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:5.0.10-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:5.2.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:5.2.7-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:5.3.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:5.4.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 1:5.5.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 3.3.6-2 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 3.3.6-2.0.1 | No fix listed |
| debian/unrar-nonfree(Debian:13) | = 3.4.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | < 1:5.5.8-1 | 1:5.5.8-1 |
| debian/unrar-nonfree(Debian:14) | = 1:3.5.2-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.5.2-0.2 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.5.4-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.5.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.5.4-1.1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.7.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.7.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.7.3-1.1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.7.8-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.7.8-2 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.8.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.8.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.8.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.8.5-2 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.9.10-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.9.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.9.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.9.6-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.9.7-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:3.9.9-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:4.0.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:4.0.3-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:4.1.4-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:4.2.4-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:4.2.4-0.2 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:4.2.4-0.3 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:5.0.10-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:5.2.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:5.2.7-0.1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:5.3.2-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:5.4.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 1:5.5.5-1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 3.3.6-2 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 3.3.6-2.0.1 | No fix listed |
| debian/unrar-nonfree(Debian:14) | = 3.4.3-1 | No fix listed |
| rarlab UnRAR | <= 5.5.6 | No fix listed |
References
- Debian Security Tracker CVE-2017-12940 vendor-advisory
- seclists.org exploit mailing-list third-party-advisory
- kc.mcafee.com
- GLSA-201709-24 vendor-advisory