CVE-2018-25018
Fixed in a distro release EPSS 1%
UnRAR 5.6.1.7 through 5.7.4 and 6.0.3 has an out-of-bounds write during a memcpy in QuickOpen::ReadRaw when called from QuickOpen::ReadNext.
Products: rarlab unrar
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | unrar-nonfree | 1:5.6.6-1 |
| Debian 13 | unrar-nonfree | 1:5.6.6-1 |
| Debian 14 | unrar-nonfree | 1:5.6.6-1 |
| Ubuntu 16.04 LTS | unrar-nonfree | no fix |
| Ubuntu 18.04 LTS | unrar-nonfree | no fix |