This update for unrar to version 5.6.1 fixes several issues. These security issues were fixed :

  - CVE-2017-12938: Prevent remote attackers to bypass a     directory-traversal protection mechanism via vectors     involving a symlink to the . directory, a symlink to the     .. directory, and a regular file (bsc#1054038).

  - CVE-2017-12940: Prevent out-of-bounds read in the     EncodeFileName::Decode call within the     Archive::ReadHeader15 function (bsc#1054038).

  - CVE-2017-12941: Prevent an out-of-bounds read in the     Unpack::Unpack20 function (bsc#1054038).

  - CVE-2017-12942: Prevent a buffer overflow in the     Unpack::LongLZ function (bsc#1054038).

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for unrar to version 5.5 fixes the following issues :

Version 5.5.5

  - CVE-2012-6706: fixes VMSF_DELTA memory corruption     (boo#1045315) see     https://bugs.chromium.org/p/project-zero/issues/detail?i     d=1286&can=1&q=unrar&desc=2

Version 5.5.1

  - Based on RAR 5.50 beta1

  - Added extraction support for .LZ archives created by     Lzip compressor.

  - Modern TAR tools can store high precision file times,     lengthy file names and large file sizes in special PAX     extended headers inside of TAR archive. Now WinRAR     supports such PAX headers and uses them when extracting     TAR archives.

  - unrar no longer fails to unpack files in ZIP archives     compressed with XZ algorithm and encrypted with AES

Version 5.4.5.

  - Based on final RAR 5.40.

  - If RAR recovery volumes (.rev files) are present in the     same folder as usual RAR volumes, archive test command     verifies .rev contents after completing testing .rar     files. If you wish to test only .rev files without     checking .rar volumes, you can run: `unrar t     arcname.part1.rev`.

  - If -p switch is used without optional <pwd> parameter, a     password can be also set with file redirection or pipe.

  - unrar treats 'arcname.partN' as 'arcname.partN.rar' if     'arcname.partN' does not exist and 'arcname.part#.rar'     exists. For example, it is allowed to run: `unrar x     arcname.part01` to start extraction from     'arcname.part01.rar'.

Heap-based buffer overflow in mspack/lzxd.c

mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file. (CVE-2017-6419)

Out-of-bounds access in the PDF parser (CVE-2018-0202)

A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the 'DestPos' variable, which allows the attacker to write out of bounds when setting Mem[DestPos]. (CVE-2012-6706)

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in developing exploit chains..
This attack appear to be exploitable via The victim must scan a crafted XAR file. (CVE-2018-1000085)

Stack-based buffer over-read in cabd_read_string function

The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file. (CVE-2017-11423)

The remote host is affected by the vulnerability described in GLSA-201804-16 (ClamAV: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ClamAV. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, through multiple vectors, could execute arbitrary       code, cause a Denial of Service condition, or have other unspecified       impacts.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
108828	SUSE SLES11 Security Update : unrar (SUSE-SU-2018:0862-1)	Nessus	SuSE Local Security Checks	2018/4/4	2024/11/21	critical
103163	openSUSE Security Update : unrar (openSUSE-2017-724)	Nessus	SuSE Local Security Checks	2017/9/13	2025/11/21	critical
108601	Amazon Linux AMI : clamav (ALAS-2018-976)	Nessus	Amazon Linux Local Security Checks	2018/3/27	2024/12/6	critical
109230	GLSA-201804-16 : ClamAV: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/4/23	2024/10/29	critical

检测

插件搜索

critical

critical

critical

critical