CVE-2017-20006 PUBLISHED

UnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).

EPSS 0.36% · 57.9th percentile

Risk Scores

EPSS Score
0.36%
57.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSunrar-nonfree0, 1:5.3.2-1, 1:5.3.2-1+deb9u1build0.16.04.1
Ubuntu:18.04:LTSunrar-nonfree0, 1:5.5.8-1

Timeline

References

Open in Interactive Console →