This update for unrar to version 5.5 fixes the following issues :

Version 5.5.5

  - CVE-2012-6706: fixes VMSF_DELTA memory corruption     (boo#1045315) see     https://bugs.chromium.org/p/project-zero/issues/detail?i     d=1286&can=1&q=unrar&desc=2

Version 5.5.1

  - Based on RAR 5.50 beta1

  - Added extraction support for .LZ archives created by     Lzip compressor.

  - Modern TAR tools can store high precision file times,     lengthy file names and large file sizes in special PAX     extended headers inside of TAR archive. Now WinRAR     supports such PAX headers and uses them when extracting     TAR archives.

  - unrar no longer fails to unpack files in ZIP archives     compressed with XZ algorithm and encrypted with AES

Version 5.4.5.

  - Based on final RAR 5.40.

  - If RAR recovery volumes (.rev files) are present in the     same folder as usual RAR volumes, archive test command     verifies .rev contents after completing testing .rar     files. If you wish to test only .rev files without     checking .rar volumes, you can run: `unrar t     arcname.part1.rev`.

  - If -p switch is used without optional <pwd> parameter, a     password can be also set with file redirection or pipe.

  - unrar treats 'arcname.partN' as 'arcname.partN.rar' if     'arcname.partN' does not exist and 'arcname.part#.rar'     exists. For example, it is allowed to run: `unrar x     arcname.part01` to start extraction from     'arcname.part01.rar'.

Heap-based buffer overflow in mspack/lzxd.c

mspack/lzxd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2, allows remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted CHM file. (CVE-2017-6419)

Out-of-bounds access in the PDF parser (CVE-2018-0202)

A VMSF_DELTA memory corruption was discovered in unrar before 5.5.5, as used in Sophos Anti-Virus Threat Detection Engine before 3.37.2 and other products, that can lead to arbitrary code execution. An integer overflow can be caused in DataSize+CurChannel. The result is a negative value of the 'DestPos' variable, which allows the attacker to write out of bounds when setting Mem[DestPos]. (CVE-2012-6706)

ClamAV version version 0.99.3 contains a Out of bounds heap memory read vulnerability in XAR parser, function xar_hash_check() that can result in Leaking of memory, may help in developing exploit chains..
This attack appear to be exploitable via The victim must scan a crafted XAR file. (CVE-2018-1000085)

Stack-based buffer over-read in cabd_read_string function

The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha, as used in ClamAV 0.99.2 and other products, allows remote attackers to cause a denial of service (stack-based buffer over-read and application crash) via a crafted CAB file. (CVE-2017-11423)

The remote host is affected by the vulnerability described in GLSA-201804-16 (ClamAV: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in ClamAV. Please review       the CVE identifiers referenced below for details.
  Impact :

    A remote attacker, through multiple vectors, could execute arbitrary       code, cause a Denial of Service condition, or have other unspecified       impacts.
  Workaround :

    There is no known workaround at this time.

This update for clamav fixes the following issues: Security issues fixed :

  - CVE-2012-6706: VMSF_DELTA filter inside the unrar     implementation allows an arbitrary memory write     (bsc#1045315).

  - CVE-2017-6419: A heap-based buffer overflow that can     lead to a denial of service in libmspack via a crafted     CHM file (bsc#1052449).

  - CVE-2017-11423: A stack-based buffer over-read that can     lead to a denial of service in mspack via a crafted CAB     file (bsc#1049423).

  - CVE-2018-1000085: An out-of-bounds heap read     vulnerability was found in XAR parser that can lead to a     denial of service (bsc#1082858).

  - CVE-2018-0202: Fixed two vulnerabilities in the PDF     parsing code (bsc#1083915).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2834-1 advisory.

    This update for unrar to version 5.6.1 fixes several issues.

    These security issues were fixed:

    - CVE-2017-12938: Prevent remote attackers to bypass a directory-traversal       protection mechanism via vectors involving a symlink to the . directory, a       symlink to the .. directory, and a regular file (bsc#1054038).
    - CVE-2017-12940: Prevent out-of-bounds read in the EncodeFileName::Decode call       within the Archive::ReadHeader15 function (bsc#1054038).
    - CVE-2017-12941: Prevent an out-of-bounds read in the Unpack::Unpack20       function (bsc#1054038).
    - CVE-2017-12942: Prevent a buffer overflow in the Unpack::LongLZ function       (bsc#1054038).
    - CVE-2017-20006: Fixed heap-based buffer overflow in Unpack:CopyString (bsc#1187974).

    These non-security issues were fixed:

    - Added extraction support for .LZ archives created by Lzip compressor
    - Enable unpacking of files in ZIP archives compressed with XZ algorithm and       encrypted with AES
    - Added support for PAX extended headers inside of TAR archive
    - If RAR recovery volumes (.rev files) are present in the same folder as usual       RAR volumes, archive test command verifies .rev contents after completing       testing .rar files
    - By default unrar skips symbolic links with absolute paths in link target when       extracting unless -ola command line switch is specified
    - Added support for AES-NI CPU instructions
    - Support for a new RAR 5.0 archiving format
    - Wildcard exclusion mask for folders
    - Prevent conditional jumps depending on uninitialised values (bsc#1046882)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for clamav fixes the following issues :

Security issues fixed :

  - CVE-2012-6706: VMSF_DELTA filter inside the unrar     implementation allows an arbitrary memory write     (bsc#1045315).

  - CVE-2017-6419: A heap-based buffer overflow that can     lead to a denial of service in libmspack via a crafted     CHM file (bsc#1052449).

  - CVE-2017-11423: A stack-based buffer over-read that can     lead to a denial of service in mspack via a crafted CAB     file (bsc#1049423).

  - CVE-2018-1000085: An out-of-bounds heap read     vulnerability was found in XAR parser that can lead to a     denial of service (bsc#1082858).

  - CVE-2018-0202: Fixed two vulnerabilities in the PDF     parsing code (bsc#1083915).

This update was imported from the SUSE:SLE-12:Update update project.

ID	Name	Product	Family	Published	Updated	Severity
103163	openSUSE Security Update : unrar (openSUSE-2017-724)	Nessus	SuSE Local Security Checks	9/13/2017	11/21/2025	critical
108601	Amazon Linux AMI : clamav (ALAS-2018-976)	Nessus	Amazon Linux Local Security Checks	3/27/2018	12/6/2024	critical
109230	GLSA-201804-16 : ClamAV: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	4/23/2018	10/29/2024	critical
108829	SUSE SLES11 Security Update : clamav (SUSE-SU-2018:0863-1)	Nessus	SuSE Local Security Checks	4/4/2018	11/21/2024	critical
152833	SUSE SLED12 / SLES12 Security Update : unrar (SUSE-SU-2021:2834-1)	Nessus	SuSE Local Security Checks	8/26/2021	6/25/2026	critical
108637	openSUSE Security Update : clamav (openSUSE-2018-314)	Nessus	SuSE Local Security Checks	3/27/2018	12/4/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical