RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7350-1 advisory.

    It was discovered that UnRAR incorrectly handled certain paths. If a user or automated system were tricked     into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to write     arbitrary files outside of the targeted directory. (CVE-2022-30333, CVE-2022-48579)

    It was discovered that UnRAR incorrectly handled certain recovery volumes. If a user or automated system     were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this     issue to execute arbitrary code. (CVE-2023-40477)

    Siddharth Dushantha discovered that UnRAR incorrectly handled ANSI escape sequences when writing screen     output. If a user or automated system were tricked into processing a specially crafted RAR archive, a     remote attacker could possibly use this issue to spoof screen output or cause a denial of service.
    (CVE-2024-33899)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or     cause a denial of service, via ANSI escape sequences. (CVE-2024-33899)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1975-1 advisory.

    - CVE-2024-33899: Fixed a denial of service via ANSI escape squences. (bsc#1225661)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
232666	Ubuntu 20.04 LTS / 22.04 LTS : UnRAR vulnerabilities (USN-7350-1)	Nessus	Ubuntu Local Security Checks	high
228307	Linux Distros Unpatched Vulnerability : CVE-2024-33899	Nessus	Misc.	high
200406	SUSE SLES12 Security Update : unrar (SUSE-SU-2024:1975-1)	Nessus	SuSE Local Security Checks	high

Detections

Analytics

CVE-2024-33899

high

Tenable Plugins

high

high

high