Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:USN-6569-1
HistoryJan 08, 2024 - 6:05 p.m.

libclamunrar vulnerabilities

2024-01-0818:05:14
Google
osv.dev
15
libclamunrar
rar archives
vulnerabilities
remote code execution
file overwrite
cve-2022-30333
cve-2023-40477
ubuntu 20.04 lts
ubuntu 22.04 lts
ubuntu 23.04
software

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.8

Confidence

Low

EPSS

0.947

Percentile

99.3%

JSON

it was discovered that libclamunrar incorrectly handled directories when
extracting RAR archives. A remote attacker could possibly use this issue to
overwrite arbitrary files and execute arbitrary code. This issue only
affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04.
(CVE-2022-30333)

It was discovered that libclamunrar incorrectly validated certain
structures when extracting RAR archives. A remote attacker could possibly
use this issue to execute arbitrary code. (CVE-2023-40477)

Related

openvas 12
ubuntu 1
gentoo 1
nessus 11
zdi 1
malwarebytes 2
debiancve 2
ubuntucve 2
fedora 1
githubexploit 6
metasploit 2
thn 8
prion 1
osv 5
cvelist 2
nvd 2
packetstorm 2
veracode 2
hackread 1
vulnrichment 1
cve 2
attackerkb 6
cisa_kev 1
redos 1
zdt 1
mageia 2
debian 4
kaspersky 1
trellix 2
rapid7blog 6
ics 2
securelist 1
avleonov 2
openvas
openvas
Ubuntu: Security Advisory (USN-6569-1)
2024-01-09 00:00:00
openSUSE: Security Advisory for clamav (SUSE-SU-2023:4415-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2022-0206)
2022-05-26 00:00:00
ubuntu
ubuntu
libclamunrar vulnerabilities
2024-01-08 00:00:00
gentoo
gentoo
RAR, UnRAR: Arbitrary File Overwrite
2023-09-17 00:00:00
nessus
nessus
GLSA-202309-04 : RAR, UnRAR: Arbitrary File Overwrite
2023-09-17 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : libclamunrar vulnerabilities (USN-6569-1)
2024-01-08 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : clamav (SUSE-SU-2023:4415-1)
2023-11-11 00:00:00
zdi
zdi
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
2023-08-17 00:00:00
malwarebytes
malwarebytes
Update now! WinRAR files can be abused to run malware
2023-08-22 11:30:00
Android phones can be taken over remotely – update when you can
2023-12-07 12:07:42
debiancve
debiancve
CVE-2023-40477
2024-05-03 03:15:20
CVE-2022-30333
2022-05-09 08:15:06
ubuntucve
ubuntucve
CVE-2023-40477
2023-08-25 00:00:00
CVE-2022-30333
2022-05-09 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: clamav-0.103.10-1.fc37
2023-09-09 00:40:28
githubexploit
githubexploit
Exploit for CVE-2023-40477
2023-08-29 14:41:58
Exploit for Path Traversal in Rarlab Unrar
2022-07-22 01:14:29
Exploit for Path Traversal in Rarlab Unrar
2022-07-15 22:29:42
metasploit
metasploit
UnRAR Path Traversal in Zimbra (CVE-2022-30333)
2022-07-27 19:45:47
UnRAR Path Traversal (CVE-2022-30333)
2022-07-19 21:05:15
thn
thn
New UnRAR Vulnerability Could Let Attackers Hack Zimbra Webmail Servers
2022-06-29 09:29:00
New WinRAR Vulnerability Could Allow Hackers to Take Control of Your PC
2023-08-21 13:44:00
CISA Issues Warning on Active Exploitation of UnRAR Software for Linux Systems
2022-08-10 06:59:00
prion
prion
Directory traversal
2022-05-09 08:15:00
osv
osv
rar - security update
2023-08-17 00:00:00
rar - security update
2023-08-27 00:00:00
libclamunrar - security update
2023-11-15 00:00:00
cvelist
cvelist
CVE-2022-30333
2022-05-09 00:00:00
CVE-2023-40477 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
2024-05-03 02:11:12
nvd
nvd
CVE-2022-30333
2022-05-09 08:15:06
CVE-2023-40477
2024-05-03 03:15:20
packetstorm
packetstorm
UnRAR Path Traversal
2024-09-12 00:00:00
Zimbra UnRAR Path Traversal
2022-08-05 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2023-08-31 07:36:26
Directory Traversal
2022-11-17 04:52:07
hackread
hackread
Fake PoC Script Used to Trick Researchers into Downloading VenomRAT
2023-09-20 01:10:45
vulnrichment
vulnrichment
CVE-2023-40477 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
2024-05-03 02:11:12
cve
cve
CVE-2023-40477
2024-05-03 03:15:20
CVE-2022-30333
2022-05-09 08:15:06
attackerkb
attackerkb
CVE-2022-30333
2022-05-09 00:00:00
CVE-2022-27924
2022-08-16 00:00:00
CVE-2022-36804
2022-08-24 00:00:00
cisa_kev
cisa_kev
RARLAB UnRAR Directory Traversal Vulnerability
2022-08-09 00:00:00
redos
redos
ROS-20240614-01
2024-06-14 00:00:00
zdt
zdt
Zimbra UnRAR Path Traversal Exploit
2022-08-07 00:00:00
mageia
mageia
Updated unrar packages fix security vulnerability
2022-05-25 21:46:18
Updated unrar packages fix security vulnerability
2023-09-11 16:07:54
debian
debian
[SECURITY] [DLA 3534-1] rar security update
2023-08-17 15:27:55
[SECURITY] [DLA 3542-1] unrar-nonfree security update
2023-08-26 20:48:41
[SECURITY] [DLA 3543-1] rar security update
2023-08-27 06:29:11
kaspersky
kaspersky
KLA52366 Multiple vulnerabilities in WinRAR
2023-08-17 00:00:00
trellix
trellix
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
CVE-2023-38831: Navigating the Threat Landscape of the Latest Security Vulnerability
2023-11-09 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-08-12 18:52:27
Exploitation of Unpatched Zero-Day Remote Code Execution Vulnerability in Zimbra Collaboration Suite (CVE-2022-41352)
2022-10-06 17:13:34
Metasploit Wrap-Up
2022-08-26 21:47:13
ics
ics
Threat Actors Exploiting Multiple CVEs Against Zimbra Collaboration Suite
2023-01-27 12:00:00
NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations
2023-10-05 12:00:00
securelist
securelist
Exploits and vulnerabilities in Q1 2024
2024-05-07 10:00:39
avleonov
avleonov
August 2023: GitHub PoCs, Vulristics, Qualys First-Party, Tenable ExposureAI, SC Awards and Rapid7, Anglo-Saxon list, MS Patch Tuesday, WinRAR, Juniper
2023-08-30 16:15:31
November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review
2024-02-01 17:07:20

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

AI Score

7.8

Confidence

Low

EPSS

0.947

Percentile

99.3%

JSON
Related for OSV:USN-6569-1
openvas12ubuntu1gentoo1nessus11zdi1malwarebytes2debiancve2ubuntucve2fedora1githubexploit6metasploit2thn8prion1osv5cvelist2nvd2packetstorm2veracode2hackread1vulnrichment1cve2attackerkb6cisa_kev1redos1zdt1mageia2debian4kaspersky1trellix2rapid7blog6ics2securelist1avleonov2