CVE-2024-33899
Fixed in a distro release EPSS <1%CVSS 7.1
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
Products: rarlab winrar, rarlab unrar
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | rar | 2:7.01-1~deb12u1 |
| Debian 12 | unrar-nonfree | no fix |
| Debian 13 | rar | 2:7.00-1 |
| Debian 13 | unrar-nonfree | 1:7.0.3-1 |
| Debian 14 | rar | 2:7.00-1 |
| Debian 14 | unrar-nonfree | 1:7.0.3-1 |
| SUSE Linux Enterprise Server 12 SP5 | unrar | 5.6.1-4.11.1 |
| SUSE Linux Enterprise Server for SAP Applications 12 SP5 | unrar | 5.6.1-4.11.1 |
| SUSE Linux Enterprise Software Development Kit 12 SP5 | unrar | 5.6.1-4.11.1 |
| Ubuntu 16.04 LTS | unrar-nonfree | no fix |
| Ubuntu 18.04 LTS | unrar-nonfree | no fix |
| Ubuntu 20.04 LTS | unrar-nonfree | 1:5.6.6-2ubuntu0.1 |
| Ubuntu 22.04 LTS | unrar-nonfree | 1:6.1.5-1ubuntu0.1 |