- Vendor / Project
- RARLAB
- Product
- UnRAR
- Date added
- Aug 9, 2022
- Due date
- Aug 30, 2022
- Known ransomware use
- Known
- CWEs
- CWE-22, CWE-59
Description
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
Required action
Apply updates per vendor instructions.
Notes
- Vulnerability updated with version 6.12. Accessing link will download update information: https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz
- https://nvd.nist.gov/vuln/detail/CVE-2022-30333