Описание
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 1.0.3-1 |
| esm-apps-legacy/xenial | ignored | in multiverse |
| esm-apps/bionic | ignored | in multiverse |
| esm-apps/focal | released | 0.103.11-0ubuntu0.20.04.1 |
| esm-apps/jammy | released | 0.103.11-0ubuntu0.22.04.1 |
| esm-apps/noble | not-affected | 1.0.3-1 |
| esm-apps/xenial | ignored | end of ESM support, was ignored [in multiverse] |
| focal | released | 0.103.11-0ubuntu0.20.04.1 |
| jammy | released | 0.103.11-0ubuntu0.22.04.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | released | 2:6.23-1 |
| esm-apps-legacy/xenial | ignored | in multiverse |
| esm-apps/bionic | ignored | in multiverse |
| esm-apps/focal | released | 2:6.23-1~20.04.1 |
| esm-apps/jammy | released | 2:6.23-1~22.04.1 |
| esm-apps/noble | released | 2:6.23-1 |
| esm-apps/xenial | ignored | end of ESM support, was ignored [in multiverse] |
| focal | released | 2:6.23-1~20.04.1 |
| jammy | released | 2:6.23-1~22.04.1 |
Показывать по
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needed |
| devel | not-affected | 1:6.1.7-1 |
| esm-apps-legacy/xenial | ignored | in multiverse |
| esm-apps/bionic | ignored | in multiverse |
| esm-apps/focal | released | 1:5.6.6-2ubuntu0.1 |
| esm-apps/jammy | released | 1:6.1.5-1ubuntu0.1 |
| esm-apps/noble | not-affected | 1:6.1.7-1 |
| esm-apps/xenial | ignored | end of ESM support, was ignored [in multiverse] |
| focal | released | 1:5.6.6-2ubuntu0.1 |
| impish | ignored | end of life |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal ...
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
Уязвимость средства разархивирования файлов UnRAR, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю перезаписать произвольные файлы
EPSS
5 Medium
CVSS2
7.5 High
CVSS3