CVE-2017-20006

NameCVE-2017-20006
DescriptionUnRAR 5.6.1.2 and 5.6.1.3 has a heap-based buffer overflow in Unpack::CopyString (called from Unpack::Unpack5 and CmdExtract::ExtractCurrentFile).
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesELA-921-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
unrar-nonfree (PTS)jessie/non-free1:5.2.7-0.1+deb8u1vulnerable
stretch/non-free1:5.6.6-1+deb9u2fixed
buster/non-free (security), buster/non-free1:5.6.6-1+deb10u4fixed
bullseye/non-free1:6.0.3-1+deb11u3fixed
bookworm/non-free1:6.2.6-1+deb12u1fixed
trixie/non-free, sid/non-free1:7.1.2-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
unrar-nonfreesourcejessie(unfixed)end-of-life
unrar-nonfreesourcestretch1:5.6.6-1+deb9u1ELA-921-1
unrar-nonfreesource(unstable)1:5.6.6-1

Notes

[stretch] - unrar-nonfree <no-dsa> (Non-free not supported)
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=4373
https://github.com/aawc/unrar/commit/0ff832d31470471803b175cfff4e40c1b08ee779
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/unrar/OSV-2017-104.yaml

Search for package or bug name: Reporting problems