Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-38831HistoryAug 23, 2023 - 5:15 p.m.
CVE-2023-38831
2023-08-2317:15:00
Debian Security Bug Tracker
security-tracker.debian.org
98
rarlabs winrar
zip archive
arbitrary code execution
cve-2023-38831
exploit
unix
EPSS
0.408
Percentile
97.3%
RARLabs WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through August 2023.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | rar | <= 2:6.20-0.1 | rar_2:6.20-0.1_all.deb |
| Debian | 11 | all | rar | <= 2:5.5.0-1 | rar_2:5.5.0-1_all.deb |
| Debian | 10 | all | rar | <= 2:5.5.0-1 | rar_2:5.5.0-1_all.deb |
| Debian | 999 | all | rar | < 2:6.23-1 | rar_2:6.23-1_all.deb |
| Debian | 12 | all | unrar-nonfree | <= 1:6.2.6-1 | unrar-nonfree_1:6.2.6-1_all.deb |
| Debian | 11 | all | unrar-nonfree | <= 1:6.0.3-1+deb11u1 | unrar-nonfree_1:6.0.3-1+deb11u1_all.deb |
| Debian | 10 | all | unrar-nonfree | <= 1:5.6.6-1+deb10u1 | unrar-nonfree_1:5.6.6-1+deb10u1_all.deb |
| Debian | 999 | all | unrar-nonfree | <= 1:6.2.10-1 | unrar-nonfree_1:6.2.10-1_all.deb |
Related
thn
thn
Google TAG Detects State-Backed Threat Actors Exploiting WinRAR Flaw
2023-10-19 04:02:00
nvd
nvd
githubexploit
githubexploit
Exploit for Insufficient Type Distinction in Rarlab Winrar
2024-08-06 13:21:27
Exploit for Insufficient Type Distinction in Rarlab Winrar
2023-12-26 01:36:32
Exploit for Insufficient Type Distinction in Rarlab Winrar
2023-12-12 14:54:30
cisa_kev
cisa_kev
RARLAB WinRAR Code Execution Vulnerability
2023-08-24 00:00:00
Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability
2024-04-30 00:00:00
packetstorm
packetstorm
WinRAR Remote Code Execution
2023-09-08 00:00:00
WinRAR 6.22 Remote Code Execution
2024-03-28 00:00:00
zdt
zdt
WinRAR version 6.22 - Remote Code Execution via ZIP archive Exploit
2024-03-29 00:00:00
WinRAR Remote Code Execution Exploit
2023-09-11 00:00:00
hivepro
hivepro
The Rise of DarkCasino APT Group Exploiting WinRAR 0-Day
2023-11-27 12:47:11
WinRAR Zero-Day Exploit Targeting Traders Since April
2023-08-25 08:16:29
SideCopy Leverages Multi-platform RAT, Assaults Indian Government Entities
2023-11-09 05:00:36
securelist
securelist
Head Mare: adventures of a unicorn in Russia and Belarus
2024-09-02 10:00:22
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
IT threat evolution in Q3 2023. Non-mobile statistics
2023-12-01 10:00:03
prion
prion
Design/Logic Flaw
2023-08-23 17:15:00
openvas
openvas
RARLabs WinRAR Code Execution Vulnerability - Windows
2023-08-31 00:00:00
exploitdb
exploitdb
WinRAR version 6.22 - Remote Code Execution via ZIP archive
2024-03-28 00:00:00
metasploit
metasploit
WinRAR CVE-2023-38831 Exploit
2023-09-04 16:56:22
attackerkb
attackerkb
CVE-2023-38831
2023-08-23 00:00:00
cnvd
cnvd
WinRAR Code Execution Vulnerability
2023-08-25 00:00:00
vulnrichment
vulnrichment
CVE-2023-38831
2023-08-23 00:00:00
cve
cve
cvelist
cvelist
CVE-2023-38831
2023-08-23 00:00:00
trellix
trellix
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
kaspersky
kaspersky
KLA52366 Multiple vulnerabilities in WinRAR
2023-08-17 00:00:00
nessus
nessus
WinRAR < 6.23 RCE
2023-08-24 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-09-15 18:54:45
