CVE catalog

CVE-2023-40477

rar: CVE-2023-40477

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
11.38% · Oct 25, 2026

RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of RARLAB WinRAR. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of recovery volumes. The issue results from the lack of proper validation of user-supplied data, which can result in a memory access past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-21233.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianrarsid2:7.23-1fixed
Debianrarforky2:7.23-1fixed
Debianrartrixie2:7.11-1fixed
Debianrarbookworm2:7.01-1~deb12u1fixed
Debianlibclamunrarsid1.4.4-1fixed
Debianlibclamunrarforky1.4.4-1fixed
Debianlibclamunrartrixie1.3.1-1fixed
Debianlibclamunrarbookworm1.3.1-1~deb12u1fixed
Debianunrar-nonfreesid1:7.3.1-1fixed
Debianunrar-nonfreeforky1:7.3.1-1fixed
Debianunrar-nonfreetrixie1:7.1.8-1fixed
Debianunrar-nonfreebookworm1:6.2.6-1+deb12u1fixed
Ubuntulibclamunrar16.040.98.5-1vulnerable
Ubuntulibclamunrar16.040.99-1vulnerable
Ubuntulibclamunrar16.040.99-1ubuntu0.1vulnerable
Ubuntulibclamunrar16.040.100.1-1~ubuntu0.16.04.1vulnerable
Ubuntulibclamunrar16.040.101.2-1~ubuntu0.16.04.1vulnerable
Ubunturar16.042:5.3.b2-1vulnerable
Ubuntuunrar-nonfree16.041:5.3.2-1vulnerable
Ubuntuunrar-nonfree16.041:5.3.2-1+deb9u1build0.16.04.1vulnerable
Ubuntulibclamunrar18.040.99-4ubuntu1vulnerable
Ubuntulibclamunrar18.040.100.1-1~ubuntu0.18.04.1vulnerable
Ubuntulibclamunrar18.040.101.2-1~ubuntu0.18.04.1vulnerable
Ubunturar18.042:5.4.0+dfsg.1-0.1vulnerable
Ubunturar18.042:5.5.0-1vulnerable
Ubuntuunrar-nonfree18.041:5.5.8-1vulnerable
Ubuntulibclamunrar20.040.101.2-1vulnerable
Ubuntulibclamunrar20.040.101.2-1build1vulnerable
Ubuntulibclamunrar20.040.103.11-0ubuntu0.20.04.1fixed
Ubunturar20.042:5.5.0-1vulnerable
Ubunturar20.042:5.5.0-1build1vulnerable
Ubunturar20.042:6.23-1~20.04.1fixed
Ubuntuunrar-nonfree20.041:5.6.6-2vulnerable
Ubuntuunrar-nonfree20.041:5.6.6-2build1vulnerable
Ubuntuunrar-nonfree20.041:5.6.6-2ubuntu0.1fixed
Ubuntulibclamunrar22.040.102.3-3vulnerable
Ubuntulibclamunrar22.040.103.11-0ubuntu0.22.04.1fixed
Ubunturar22.042:5.5.0-1build1vulnerable
Ubunturar22.042:5.5.0-1.1vulnerable
Ubunturar22.042:6.23-1~22.04.1fixed
Ubuntuunrar-nonfree22.041:6.0.5-1vulnerable
Ubuntuunrar-nonfree22.041:6.0.7-6vulnerable
Ubuntuunrar-nonfree22.041:6.1.2-1vulnerable
Ubuntuunrar-nonfree22.041:6.1.3-1vulnerable
Ubuntuunrar-nonfree22.041:6.1.3-2vulnerable
Ubuntuunrar-nonfree22.041:6.1.4-1vulnerable
Ubuntuunrar-nonfree22.041:6.1.5-1vulnerable
Ubuntuunrar-nonfree22.041:6.1.5-1ubuntu0.1fixed
Ubunturar24.042:6.23-1fixed
Suseclamavlinux enterprise server 12 sp50.103.11-3.30.1fixed
Suseclamavlinux enterprise server for sap applications 12 sp50.103.11-3.30.1fixed
Suseclamavlinux enterprise module for basesystem 15 sp40.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise module for basesystem 15 sp50.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise high performance computing 15 sp1-ltss0.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise high performance computing 15 sp2-ltss0.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise high performance computing 15 sp3-espos0.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise high performance computing 15 sp3-ltss0.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise server 15 sp1-ltss0.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise server 15 sp2-ltss0.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise server 15 sp3-ltss0.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise server for sap applications 15 sp10.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise server for sap applications 15 sp20.103.11-150000.3.50.1fixed
Suseclamavlinux enterprise server for sap applications 15 sp30.103.11-150000.3.50.1fixed
Suseclamavmanager proxy 4.20.103.11-150000.3.50.1fixed
Suseclamavmanager server 4.20.103.11-150000.3.50.1fixed
Suseclamaventerprise storage 7.10.103.11-150000.3.50.1fixed
Opensuseclamavleap 15.40.103.11-150000.3.50.1fixed
Opensuseclamavleap 15.50.103.11-150000.3.50.1fixed
Opensuseclamavtumbleweed0.103.11-2.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianrarsourcesid2:6.23-1not yet assignedNot reportedNot reported
Debianrarsourceforky2:6.23-1not yet assignedNot reportedNot reported
Debianrarsourcetrixie2:6.23-1not yet assignedNot reportedNot reported
Debianrarsourcebookworm2:6.23-1~deb12u1not yet assignedNot reportedNot reported
Debianlibclamunrarsourcesid1.0.3-1not yet assignedNot reportedNot reported
Debianlibclamunrarsourceforky1.0.3-1not yet assignedNot reportedNot reported
Debianlibclamunrarsourcetrixie1.0.3-1not yet assignedNot reportedNot reported
Debianlibclamunrarsourcebookworm1.0.3-1~deb12u1not yet assignedNot reportedNot reported
Debianunrar-nonfreesourcesid1:6.2.10-1not yet assignedNot reportedNot reported
Debianunrar-nonfreesourceforky1:6.2.10-1not yet assignedNot reportedNot reported
Debianunrar-nonfreesourcetrixie1:6.2.10-1not yet assignedNot reportedNot reported
Debianunrar-nonfreesourcebookworm1:6.2.6-1+deb12u1not yet assignedNot reportedNot reported
Ubuntulibclamunrardeb20.040.103.11-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2023-40477Not reported
Ubunturardeb20.042:6.23-1~20.04.1Not reportedUBUNTU-CVE-2023-40477Not reported
Ubuntuunrar-nonfreedeb20.041:5.6.6-2ubuntu0.1Not reportedUBUNTU-CVE-2023-40477Not reported
Ubuntulibclamunrardeb22.040.103.11-0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2023-40477Not reported
Ubunturardeb22.042:6.23-1~22.04.1Not reportedUBUNTU-CVE-2023-40477Not reported
Ubuntuunrar-nonfreedeb22.041:6.1.5-1ubuntu0.1Not reportedUBUNTU-CVE-2023-40477Not reported
Ubunturardeb24.042:6.23-1Not reportedUBUNTU-CVE-2023-40477Not reported
Suseclamavrpmlinux enterprise server 12 sp50.103.11-3.30.1Not reportedSUSE-SU-2023:4297-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 12 sp50.103.11-3.30.1Not reportedSUSE-SU-2023:4297-1Not reported
Suseclamavrpmlinux enterprise module for basesystem 15 sp40.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise module for basesystem 15 sp50.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp1-ltss0.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp2-ltss0.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp3-espos0.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise high performance computing 15 sp3-ltss0.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise server 15 sp1-ltss0.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise server 15 sp2-ltss0.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise server 15 sp3-ltss0.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 15 sp10.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 15 sp20.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmlinux enterprise server for sap applications 15 sp30.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmmanager proxy 4.20.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmmanager server 4.20.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Suseclamavrpmenterprise storage 7.10.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Opensuseclamavrpmleap 15.40.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Opensuseclamavrpmleap 15.50.103.11-150000.3.50.1Not reportedSUSE-SU-2023:4415-1Not reported
Opensuseclamavrpmtumbleweed0.103.11-2.1Not reportedOPENSUSE-SU-2024:13394-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]