CVE-2017-12942

Published: 08/18/2017 14:29:00
libunrar.a in UnRAR before 5.5.7 has a buffer overflow in the Unpack::LongLZ function.
CRITICAL
CVSS v3: 9.8

Status

DocFilters Release Package State Justification Comment
25.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
24.4 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
24.4.0 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
24.3 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
24.2.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
24.2 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
24.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
23.3 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
23.2.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
23.2 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
23.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
22.4 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
22.3 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
22.2 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
22.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
21.11.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
21.11 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
21.8.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
21.8 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
21.5.1 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
21.5.0 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
21.2.0 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
11.4.20 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
11.4.19.3667 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
11.4.18.3599 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
11.4.17 unrar (5.9.1) Not Affected Code Not Present 5.9.1 does not match CVE configuration.
11.4.16.3445 unrar (5.3.9) Needs Triage
11.4.15.3368 unrar (5.3.9) Needs Triage
11.4.14.3263 unrar (5.3.9) Needs Triage
11.4.13.3179 unrar (5.3.9) Needs Triage
11.4.12.3054 unrar (5.3.9) Needs Triage
11.4.11.3040 unrar (5.3.9) Needs Triage
11.4.11.2990 unrar (5.3.9) Needs Triage
11.4.10.2934 unrar (5.3.9) Needs Triage
11.4.9.2878 unrar (5.3.9) Needs Triage
11.4.8.2822 unrar (5.3.9) Needs Triage

Severity score breakdown

Attack Complexity
LOW
Attack Vector
NETWORK
Availability Impact
HIGH
Base Score
9.8
Base Severity
CRITICAL
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Privileges Required
NONE
Scope
UNCHANGED
User Interaction
NONE
Vector String
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Version
3.0

References