Improper Validation of Array Index in WinRAR - CVE-2023-40477

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU79711

Improper Validation of Array Index in WinRAR - CVE-2023-40477

Published: August 19, 2023 / Updated: June 14, 2024


Vulnerability identifier: #VU79711
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-40477
CWE-ID: CWE-129
Exploitation vector: Remote access
Exploit availability: Public exploit is available

Vulnerability details

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to improper validation of array index when processing recovery volumes. A remote attacker can trick the victim to open a specially crafted archive and execute arbitrary code on the system.


Affected software

WinRAR
Gentoo Linux
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise High Performance Computing 12
SUSE CaaS Platform
SUSE Manager Retail Branch Server
SUSE Manager Proxy
SUSE Manager Server
Fedora
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP1 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS
SUSE Linux Enterprise Server 15 SP2 LTSS
SUSE Linux Enterprise High Performance Computing 15 SP2 LTSS
SUSE Linux Enterprise Server 15 SP3 LTSS
Basesystem Module
openSUSE Leap
Ubuntu
Oracle Solaris
clamav
clamav (Ubuntu package)
libclamunrar9 (Ubuntu package)
clamav-debugsource
clamav-debuginfo
libclamav9-debuginfo
clamav-devel
libfreshclam2
libclamav9
libfreshclam2-debuginfo
libclamunrar11 (Ubuntu package)
app-antivirus/clamav
libunrar5 (Ubuntu package)
unrar (Ubuntu package)
app-arch/unrar
app-arch/rar
rar (Ubuntu package)
RSA Authentication Manager

How to mitigate CVE-2023-40477

Install updates from vendor's website.

WinRAR - update to 6.23
clamav - addressed in versions 0.103.10-1.el7, 0.103.10-1.el8, 0.103.10-1.fc37
clamav (Ubuntu package) - addressed in versions 0.103.11+dfsg-0ubuntu0.20.04.1, 0.103.11+dfsg-0ubuntu0.22.04.1, 0.103.11+dfsg-0ubuntu0.23.04.1, 1.0.4+dfsg-0ubuntu0.23.10.1
libclamunrar9 (Ubuntu package) - addressed in versions 0.103.11-0ubuntu0.20.04.1, 0.103.11-0ubuntu0.22.04.1, 0.103.11-0ubuntu0.23.04.1
clamav-debugsource - addressed in versions 0.103.11-3.30.1, 0.103.11-150000.3.50.1
clamav - addressed in versions 0.103.11-3.30.1, 0.103.11-150000.3.50.1
clamav-debuginfo - addressed in versions 0.103.11-3.30.1, 0.103.11-150000.3.50.1
libclamav9-debuginfo - update to 0.103.11-150000.3.50.1
clamav-devel - update to 0.103.11-150000.3.50.1
libfreshclam2 - update to 0.103.11-150000.3.50.1
libclamav9 - update to 0.103.11-150000.3.50.1
libfreshclam2-debuginfo - update to 0.103.11-150000.3.50.1
libclamunrar11 (Ubuntu package) - update to 1.0.4-0ubuntu0.23.10.1
app-antivirus/clamav - update to 1.4.1
libunrar5 (Ubuntu package) - addressed in versions 1:5.6.6-2ubuntu0.1, 1:6.1.5-1ubuntu0.1
unrar (Ubuntu package) - addressed in versions 1:5.6.6-2ubuntu0.1, 1:6.1.5-1ubuntu0.1
app-arch/unrar - update to 6.2.10
app-arch/rar - update to 6.23
rar (Ubuntu package) - addressed in versions 2:6.23-1~20.04.1, 2:6.23-1~22.04.1
RSA Authentication Manager - addressed in versions 8.7 SP1 Patch 3, 8.7 SP2 Patch 1
Oracle Solaris - update to 11.4 SRU 62

Links to Public Exploits and PoC-codes

External References

Related Security Bulletins