Arbitrary Code Execution Vulnerability in libclamunrar
Summary
DLA-1014-1: libclamunrar - security update. Affects libclamunrar versions < 0.99-0+deb7u2. Fixed in 0.99-0+deb7u2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
libclamunrar is a library that provides unrar support to the Clam anti-virus software. It allows Clam to extract and scan files compressed in the RAR format. The library is used by various applications and services that rely on Clam for virus scanning and malware detection. However, a vulnerability has been discovered in libclamunrar that could allow an attacker to execute arbitrary code.
Vulnerability Detail
The vulnerability in libclamunrar is caused by an integer overflow issue. Specifically, an integer variable called DestPos can become negative due to the overflow, leading to an out-of-bounds write when setting Mem[DestPos]. This allows an attacker to write data beyond the intended boundaries of the memory buffer, potentially leading to arbitrary code execution. The impact of this vulnerability can be severe, as it provides an avenue for attackers to execute malicious code on systems that use libclamunrar.
How To Fix
Minimum fixed version
0.99-0+deb7u2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade libclamunrarTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The arbitrary code execution vulnerability in libclamunrar poses a significant risk to systems that use this library for unrar support. It is crucial to upgrade to the patched version of libclamunrar (0.99-0+deb7u2 or later) to protect against potential attacks. For further support and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for libclamunrar →
FAQ
libclamunrar is a library that adds unrar support to the Clam anti-virus software. It allows Clam to extract and scan files compressed in the RAR format.
The vulnerability allows an attacker to execute arbitrary code, potentially leading to a complete compromise of the affected system.
To fix this vulnerability, you should upgrade the libclamunrar package to version 0.99-0+deb7u2 or later.
No, there are no known workarounds for this vulnerability. It is recommended to apply the official patch by upgrading the libclamunrar package.
There is no specific information about known exploits for this vulnerability. However, it is always important to promptly apply security patches to mitigate the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for libclamunrar.
