UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7350-1 advisory.

    It was discovered that UnRAR incorrectly handled certain paths. If a user or automated system were tricked     into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to write     arbitrary files outside of the targeted directory. (CVE-2022-30333, CVE-2022-48579)

    It was discovered that UnRAR incorrectly handled certain recovery volumes. If a user or automated system     were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this     issue to execute arbitrary code. (CVE-2023-40477)

    Siddharth Dushantha discovered that UnRAR incorrectly handled ANSI escape sequences when writing screen     output. If a user or automated system were tricked into processing a specially crafted RAR archive, a     remote attacker could possibly use this issue to spoof screen output or cause a denial of service.
    (CVE-2024-33899)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of clamav installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48579 advisory.

  - UnRAR before 6.2.3 allows extraction of files outside of the destination folder via symlink chains.
    (CVE-2022-48579)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3535 advisory.

    -------------------------------------------------------------------------     Debian LTS Advisory DLA-3535-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                      Markus Koschany     August 17, 2023                               https://wiki.debian.org/LTS
    -------------------------------------------------------------------------

    Package        : unrar-nonfree     Version        : 1:5.6.6-1+deb10u3     CVE ID         : CVE-2022-48579

    It was discovered that UnRAR, an unarchiver for rar files, allows extraction of     files outside of the destination folder via symlink chains.

    For Debian 10 buster, this problem has been fixed in version     1:5.6.6-1+deb10u3.

    We recommend that you upgrade your unrar-nonfree packages.

    For the detailed security status of unrar-nonfree please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/unrar-nonfree

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS     Attachment:
    signature.asc     Description: This is a digitally signed message part

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
232666	Ubuntu 20.04 LTS / 22.04 LTS : UnRAR vulnerabilities (USN-7350-1)	Nessus	Ubuntu Local Security Checks	high
201593	CBL Mariner 2.0 Security Update: clamav (CVE-2022-48579)	Nessus	MarinerOS Local Security Checks	high
179972	Debian dla-3535 : libunrar-dev - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2022-48579

high

Tenable Plugins

high

high

high