Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 01:55:48 +0000 CVE-2022-30333 https://vulnerability.circl.lu/vuln/cve-2022-30333 <p>RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.</p> <p>RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.</p> https://vulnerability.circl.lu/vuln/cve-2022-30333 USN-6569-1 — libclamunrar vulnerabilities https://vulnerability.circl.lu/vuln/usn-6569-1 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libclamunrar, Ubuntu:22.04:LTS: libclamunrar</p> <p>it was discovered that libclamunrar incorrectly handled directories when extracting RAR archives. A remote attacker could possibly use this issue to overwrite arbitrary files and execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2022-30333)</p> <p>It was discovered that libclamunrar incorrectly validated certain structures when extracting RAR archives. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-40477)</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: libclamunrar, Ubuntu:22.04:LTS: libclamunrar</p> <p>it was discovered that libclamunrar incorrectly handled directories when extracting RAR archives. A remote attacker could possibly use this issue to overwrite arbitrary files and execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2022-30333)</p> <p>It was discovered that libclamunrar incorrectly validated certain structures when extracting RAR archives. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-40477)</p> https://vulnerability.circl.lu/vuln/usn-6569-1