Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-6569-1 2 CVEs

libclamunrar vulnerabilities

Published Jan 8, 2024 · Updated Oct 27, 2026

Ecosystem: Ubuntu

Summary

it was discovered that libclamunrar incorrectly handled directories when
extracting RAR archives. A remote attacker could possibly use this issue to
overwrite arbitrary files and execute arbitrary code. This issue only
affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, and Ubuntu 23.04.
(CVE-2022-30333)

It was discovered that libclamunrar incorrectly validated certain
structures when extracting RAR archives. A remote attacker could possibly
use this issue to execute arbitrary code. (CVE-2023-40477)

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS libclamunrar 0.103.11-0ubuntu0.20.04.1
Ubuntu · 22.04 LTS 22.04:LTS libclamunrar 0.103.11-0ubuntu0.22.04.1

Vulnerabilities 2

  • Critical 9.8
    CVE-2022-30333 Exploited · Ransomware Public exploit EPSS 99%

    RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) …

    unrar-nonfree unrar-nonfree rar libclamunrar Debian Ubuntu
    KEV Aug 9, 2022
  • High 7.8
    CVE-2023-40477 Public exploit EPSS 11%

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability

    RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this…

    RARLAB WinRAR unrar-nonfree unrar-nonfree Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2022-30333
  • report
    https://ubuntu.com/security/CVE-2023-40477