CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
- Record
CVE-2023-40477- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-129
- Updated
- 2026-11-02
EUVDEUVD-2023-45048
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
- Record
EUVD-2023-45048- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-58vr-f4x9-3h36
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution...
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
- Record
GHSA-58vr-f4x9-3h36- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-129
- Updated
- 2026-11-02
NVD
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
- Record
CVE-2023-40477- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-129
- Updated
- 2026-11-02
OSV
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
- Record
CVE-2023-40477- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
- Record
DEBIAN-CVE-2023-40477- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 8 moreShow less
OSVUBUNTU-CVE-2023-40477
RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.
- Record
UBUNTU-CVE-2023-40477- CVSS 3.0
- 7.8 High
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2023-0258 No score
Updated unrar packages fix security vulnerability
Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. (CVE-2023-40477)
- Record
MGASA-2023-0258- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13394-1 No score
clamav-0.103.11-2.1 on GA media
These are all security issues fixed in the clamav-0.103.11-2.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13394-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4297-1 No score
Security update for clamav
This update for clamav fixes the following issues:
-
Updated to version 0.103.11:
- CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 (bsc#1216625).
- Record
SUSE-SU-2023:4297-1- Updated
- 2026-11-02
OSVSUSE-SU-2023:4415-1 No score
Security update for clamav
This update for clamav fixes the following issues:
-
Updated to version 0.103.11:
- CVE-2023-40477: Updated libclamunrar dependency to version 6.2.12 (bsc#1216625).
- Record
SUSE-SU-2023:4415-1- Updated
- 2026-11-02
OSVUSN-6569-1 No score
libclamunrar vulnerabilities
it was discovered that libclamunrar incorrectly handled directories when extracting RAR archives. A remote attacker could possibly use this issue to overwrite arbitrary files and execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04. (CVE-2022-30333)
It was discovered that libclamunrar incorrectly validated certain structures when extracting RAR archives. A remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-40477)
- Record
USN-6569-1- Updated
- 2026-11-02
OSVUSN-7349-1 No score
rar vulnerabilities
It was discovered that RAR incorrectly handled certain paths. If a user or automated system were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to write arbitrary files outside of the targeted directory. (CVE-2022-30333)
It was discovered that RAR incorrectly handled certain recovery volumes. If a user or automated system were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-40477)
- Record
USN-7349-1- Updated
- 2026-11-02
OSVUSN-7350-1 No score
unrar-nonfree vulnerabilities
It was discovered that UnRAR incorrectly handled certain paths. If a user or automated system were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to write arbitrary files outside of the targeted directory. (CVE-2022-30333, CVE-2022-48579)
It was discovered that UnRAR incorrectly handled certain recovery volumes. If a user or automated system were tricked into extracting a specially crafted RAR archive, a remote attacker could possibly use this issue to execute arbitrary code. (CVE-2023-40477)
Siddharth Dushantha discovered that UnRAR incorrectly handled ANSI escape sequences when writing screen output. If a user or automated system were tricked into processing a specially crafted RAR archive, a remote attacker could possibly use this issue to spoof screen output or cause a denial of service. (CVE-2024-33899)
- Record
USN-7350-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
libclamunrarDebian:12 |
before 1.0.3-1~deb12u1, plus listed versions 0.100.0-10.100.1-10.101.1-10.101.1-20.101.2-1 Show 22 moreShow less0.102.3-10.102.3-20.102.3-30.103.10-1~deb11u10.95.1-10.95.2-10.95.3-10.95.3-1~volatile10.96-10.96-20.96-2~volatile10.96.4-10.96.4-1~volatile10.98.1-10.98.5-10.99-10.99-20.99-30.99-41.0.0-11.0.0-21.0.3-1~deb11u1 |
1.0.3-1~deb12u1 |
libclamunrarDebian:13 |
before 1.0.3-1, plus listed versions 0.100.0-10.100.1-10.101.1-10.101.1-20.101.2-1 Show 23 moreShow less0.102.3-10.102.3-20.102.3-30.103.10-1~deb11u10.95.1-10.95.2-10.95.3-10.95.3-1~volatile10.96-10.96-20.96-2~volatile10.96.4-10.96.4-1~volatile10.98.1-10.98.5-10.99-10.99-20.99-30.99-41.0.0-11.0.0-21.0.3-1~deb11u11.0.3-1~deb12u1 |
1.0.3-1 |
libclamunrarDebian:14 |
before 1.0.3-1, plus listed versions 0.100.0-10.100.1-10.101.1-10.101.1-20.101.2-1 Show 23 moreShow less0.102.3-10.102.3-20.102.3-30.103.10-1~deb11u10.95.1-10.95.2-10.95.3-10.95.3-1~volatile10.96-10.96-20.96-2~volatile10.96.4-10.96.4-1~volatile10.98.1-10.98.5-10.99-10.99-20.99-30.99-41.0.0-11.0.0-21.0.3-1~deb11u11.0.3-1~deb12u1 |
1.0.3-1 |
rarDebian:12 |
before 2:6.23-1~deb12u1, plus listed versions 1:3.5.1-11:3.6.0-11:3.7.1-11:3.7.1-21:3.7b1-1 Show 33 moreShow less1:3.7b1-21:3.8.0-11:3.8.0-21:3.8b2-11:3.8b2-21:3.8b3-11:3.9.b2-11:3.9.b3-12.02-22.60-12.80-22:3.9.0-12:3.9.1-12:3.9.2-12:3.9.3-12:4.0.b2-12:4.0.b3-12:4.2.0+dfsg.1-0.12:4.2.0-12:5.2.1b2-12:5.3.b2-12:5.4.0+dfsg.1-0.12:5.4.0-12:5.5.0-12:5.5.0-1.12:6.11-0.12:6.20-0.12:6.20-0.1~deb10u12:6.20-0.1~deb11u12:6.20~b1-0.12:6.23-1~deb10u12:6.23-1~deb11u13.30-2 |
2:6.23-1~deb12u1 |
rarDebian:13 |
before 2:6.23-1, plus listed versions 1:3.5.1-11:3.6.0-11:3.7.1-11:3.7.1-21:3.7b1-1 Show 34 moreShow less1:3.7b1-21:3.8.0-11:3.8.0-21:3.8b2-11:3.8b2-21:3.8b3-11:3.9.b2-11:3.9.b3-12.02-22.60-12.80-22:3.9.0-12:3.9.1-12:3.9.2-12:3.9.3-12:4.0.b2-12:4.0.b3-12:4.2.0+dfsg.1-0.12:4.2.0-12:5.2.1b2-12:5.3.b2-12:5.4.0+dfsg.1-0.12:5.4.0-12:5.5.0-12:5.5.0-1.12:6.11-0.12:6.20-0.12:6.20-0.1~deb10u12:6.20-0.1~deb11u12:6.20~b1-0.12:6.23-1~deb10u12:6.23-1~deb11u12:6.23-1~deb12u13.30-2 |
2:6.23-1 |
rarDebian:14 |
before 2:6.23-1, plus listed versions 1:3.5.1-11:3.6.0-11:3.7.1-11:3.7.1-21:3.7b1-1 Show 34 moreShow less1:3.7b1-21:3.8.0-11:3.8.0-21:3.8b2-11:3.8b2-21:3.8b3-11:3.9.b2-11:3.9.b3-12.02-22.60-12.80-22:3.9.0-12:3.9.1-12:3.9.2-12:3.9.3-12:4.0.b2-12:4.0.b3-12:4.2.0+dfsg.1-0.12:4.2.0-12:5.2.1b2-12:5.3.b2-12:5.4.0+dfsg.1-0.12:5.4.0-12:5.5.0-12:5.5.0-1.12:6.11-0.12:6.20-0.12:6.20-0.1~deb10u12:6.20-0.1~deb11u12:6.20~b1-0.12:6.23-1~deb10u12:6.23-1~deb11u12:6.23-1~deb12u13.30-2 |
2:6.23-1 |
unrar-nonfreeDebian:12 |
before 1:6.2.6-1+deb12u1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 45 moreShow less1:3.7.2-11:3.7.3-11:3.7.3-1.11:3.7.8-11:3.7.8-21:3.8.2-11:3.8.4-11:3.8.5-11:3.8.5-21:3.9.10-11:3.9.3-11:3.9.5-11:3.9.6-11:3.9.7-11:3.9.9-11:4.0.2-11:4.0.3-11:4.1.4-11:4.2.4-0.11:4.2.4-0.21:4.2.4-0.31:5.0.10-11:5.2.5-11:5.2.7-0.11:5.3.2-11:5.4.5-11:5.5.5-11:5.5.8-11:5.6.6-11:5.6.6-21:5.9.4-11:6.0.3-11:6.0.4-11:6.0.4-21:6.0.5-11:6.0.6-11:6.0.7-11:6.0.7-21:6.0.7-31:6.0.7-41:6.0.7-51:6.0.7-61:6.1.2-11:6.1.3-11:6.1.3-2 |
1:6.2.6-1+deb12u1 |
unrar-nonfreeDebian:13 |
before 1:6.2.10-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 45 moreShow less1:3.7.2-11:3.7.3-11:3.7.3-1.11:3.7.8-11:3.7.8-21:3.8.2-11:3.8.4-11:3.8.5-11:3.8.5-21:3.9.10-11:3.9.3-11:3.9.5-11:3.9.6-11:3.9.7-11:3.9.9-11:4.0.2-11:4.0.3-11:4.1.4-11:4.2.4-0.11:4.2.4-0.21:4.2.4-0.31:5.0.10-11:5.2.5-11:5.2.7-0.11:5.3.2-11:5.4.5-11:5.5.5-11:5.5.8-11:5.6.6-11:5.6.6-21:5.9.4-11:6.0.3-11:6.0.4-11:6.0.4-21:6.0.5-11:6.0.6-11:6.0.7-11:6.0.7-21:6.0.7-31:6.0.7-41:6.0.7-51:6.0.7-61:6.1.2-11:6.1.3-11:6.1.3-2 |
1:6.2.10-1 |
unrar-nonfreeDebian:14 |
before 1:6.2.10-1, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 45 moreShow less1:3.7.2-11:3.7.3-11:3.7.3-1.11:3.7.8-11:3.7.8-21:3.8.2-11:3.8.4-11:3.8.5-11:3.8.5-21:3.9.10-11:3.9.3-11:3.9.5-11:3.9.6-11:3.9.7-11:3.9.9-11:4.0.2-11:4.0.3-11:4.1.4-11:4.2.4-0.11:4.2.4-0.21:4.2.4-0.31:5.0.10-11:5.2.5-11:5.2.7-0.11:5.3.2-11:5.4.5-11:5.5.5-11:5.5.8-11:5.6.6-11:5.6.6-21:5.9.4-11:6.0.3-11:6.0.4-11:6.0.4-21:6.0.5-11:6.0.6-11:6.0.7-11:6.0.7-21:6.0.7-31:6.0.7-41:6.0.7-51:6.0.7-61:6.1.2-11:6.1.3-11:6.1.3-2 |
1:6.2.10-1 |
unrar-nonfreeDebian:10 |
before 1:5.6.6-1+deb10u4, plus listed versions 1:3.5.2-0.11:3.5.2-0.21:3.5.4-0.11:3.5.4-11:3.5.4-1.1 Show 35 moreShow less1:3.7.2-11:3.7.3-11:3.7.3-1.11:3.7.8-11:3.7.8-21:3.8.2-11:3.8.4-11:3.8.5-11:3.8.5-21:3.9.10-11:3.9.3-11:3.9.5-11:3.9.6-11:3.9.7-11:3.9.9-11:4.0.2-11:4.0.3-11:4.1.4-11:4.2.4-0.11:4.2.4-0.21:4.2.4-0.31:5.0.10-11:5.2.5-11:5.2.7-0.11:5.3.2-11:5.4.5-11:5.5.5-11:5.5.8-11:5.6.6-11:5.6.6-1+deb10u11:5.6.6-1+deb10u21:5.6.6-1+deb10u33.3.6-23.3.6-2.0.13.4.3-1 |
1:5.6.6-1+deb10u4 |
Show 37 moreShow less
| Package | Affected | Fixed |
|---|---|---|
rarDebian:10 |
before 2:6.23-1~deb10u1, plus listed versions 1:3.5.1-11:3.6.0-11:3.7.1-11:3.7.1-21:3.7b1-1 Show 31 moreShow less1:3.7b1-21:3.8.0-11:3.8.0-21:3.8b2-11:3.8b2-21:3.8b3-11:3.9.b2-11:3.9.b3-12.02-22.60-12.80-22:3.9.0-12:3.9.1-12:3.9.2-12:3.9.3-12:4.0.b2-12:4.0.b3-12:4.2.0+dfsg.1-0.12:4.2.0-12:5.2.1b2-12:5.3.b2-12:5.4.0+dfsg.1-0.12:5.4.0-12:5.5.0-12:5.5.0-1.12:6.11-0.12:6.20-0.12:6.20-0.1~deb10u12:6.20-0.1~deb11u12:6.20~b1-0.13.30-2 |
2:6.23-1~deb10u1 |
libclamunrarDebian:10 |
before 0.103.10-0+deb10u1, plus listed versions 0.100.0-10.100.1-10.101.1-10.101.1-20.101.2-1 Show 19 moreShow less0.102.3-0+deb10u10.102.3-10.102.3-20.102.3-30.95.1-10.95.2-10.95.3-10.95.3-1~volatile10.96-10.96-20.96-2~volatile10.96.4-10.96.4-1~volatile10.98.1-10.98.5-10.99-10.99-20.99-30.99-4 |
0.103.10-0+deb10u1 |
unrarMageia:8 |
before 6.23-1.mga8.nonfree | 6.23-1.mga8.nonfree |
unrarMageia:9 |
before 6.23-1.mga9.nonfree | 6.23-1.mga9.nonfree |
clamavSUSE:Linux Enterprise Server 12 SP5 |
before 0.103.11-3.30.1 | 0.103.11-3.30.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 12 SP5 |
before 0.103.11-3.30.1 | 0.103.11-3.30.1 |
clamavSUSE:Linux Enterprise Module for Basesystem 15 SP4 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise Module for Basesystem 15 SP5 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise Server 15 SP1-LTSS |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise Server 15 SP2-LTSS |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise Server 15 SP3-LTSS |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP1 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP2 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Linux Enterprise Server for SAP Applications 15 SP3 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Manager Proxy 4.2 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Manager Server 4.2 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavSUSE:Enterprise Storage 7.1 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavopenSUSE:Leap 15.4 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
clamavopenSUSE:Leap 15.5 |
before 0.103.11-150000.3.50.1 | 0.103.11-150000.3.50.1 |
libclamunrarUbuntu:16.04:LTS |
All versions, plus listed versions 0.98.5-10.99-10.99-1ubuntu0.10.100.1-1~ubuntu0.16.04.10.101.2-1~ubuntu0.16.04.1 |
None known |
rarUbuntu:16.04:LTS |
All versions, plus listed versions 2:5.3.b2-1 |
None known |
unrar-nonfreeUbuntu:16.04:LTS |
All versions, plus listed versions 1:5.3.2-11:5.3.2-1+deb9u1build0.16.04.1 |
None known |
libclamunrarUbuntu:18.04:LTS |
All versions, plus listed versions 0.99-4ubuntu10.100.1-1~ubuntu0.18.04.10.101.2-1~ubuntu0.18.04.1 |
None known |
rarUbuntu:18.04:LTS |
All versions, plus listed versions 2:5.4.0+dfsg.1-0.12:5.5.0-1 |
None known |
unrar-nonfreeUbuntu:18.04:LTS |
All versions, plus listed versions 1:5.5.8-1 |
None known |
libclamunrarUbuntu:20.04:LTS |
before 0.103.11-0ubuntu0.20.04.1, plus listed versions 0.101.2-10.101.2-1build1 |
0.103.11-0ubuntu0.20.04.1 |
rarUbuntu:20.04:LTS |
before 2:6.23-1~20.04.1, plus listed versions 2:5.5.0-12:5.5.0-1build1 |
2:6.23-1~20.04.1 |
unrar-nonfreeUbuntu:20.04:LTS |
before 1:5.6.6-2ubuntu0.1, plus listed versions 1:5.6.6-21:5.6.6-2build1 |
1:5.6.6-2ubuntu0.1 |
libclamunrarUbuntu:22.04:LTS |
before 0.103.11-0ubuntu0.22.04.1, plus listed versions 0.102.3-3 |
0.103.11-0ubuntu0.22.04.1 |
rarUbuntu:22.04:LTS |
before 2:6.23-1~22.04.1, plus listed versions 2:5.5.0-1build12:5.5.0-1.1 |
2:6.23-1~22.04.1 |
unrar-nonfreeUbuntu:22.04:LTS |
before 1:6.1.5-1ubuntu0.1, plus listed versions 1:6.0.5-11:6.0.7-61:6.1.2-11:6.1.3-11:6.1.3-21:6.1.4-11:6.1.5-1 |
1:6.1.5-1ubuntu0.1 |
rarUbuntu:24.04:LTS |
before 2:6.23-1 | 2:6.23-1 |
clamavopenSUSE:Tumbleweed |
before 0.103.11-2.1 | 0.103.11-2.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | wildptr-io/Winrar-CVE-2023-40477-POC | 2023-08-29 |
| PoC in GitHub | winkler-winsen/Scan_WinRAR | 2023-08-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-40477 is a high vulnerability (CVSS 7.8) in Rarlab Winrar, published August 25, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 11.4%, the 95th percentile. Fixed in libclamunrar 1.0.3-1~deb12u1.
References
zerodayinitiative.com/advisories/ZDI-23-1152
win-rar.com/singlenewsview.html?&L=0&tx_ttnews%5Btt_news%5D=232&cHash=c5bf79590657e32554c6683296a8e8aa
lists.debian.org/debian-lts-announce/2023/11/msg00009.html
nvd.nist.gov/vuln/detail/CVE-2023-40477
github.com/advisories/GHSA-58vr-f4x9-3h36
security-tracker.debian.org/tracker/CVE-2023-40477
Show 16 moreShow less
advisories.mageia.org/MGASA-2023-0258.html
bugs.mageia.org/show_bug.cgi?id=32205
debian.org/lts/security/2023/dla-3535
suse.com/support/update/announcement/2023/suse-su-20234297-1
bugzilla.suse.com/1216625
ubuntu.com/security/CVE-2023-40477
blog.clamav.net/2023/08/clamav-120-feature-version-and-111-102.html
cve.org/CVERecord?id=CVE-2023-40477
Left out here: 66 versions. The JSON record has them.