PatchTheCVEarj archiver vulnerabilities and fixes
Recent CVEs affecting arj archiver, with upgrade or downgrade steps. 3 tracked.
Also searched as: arjarchiver.
arj archiver has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2015-04-08. Highest priority: CVE-2015-2782 (score 55/100).
- CVE-2015-2782 HIGH 7.5 MITIGATE MITIGATE Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (cras
- CVE-2015-0557 MEDIUM 5.8 UPGRADE MITIGATE Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote atta
- CVE-2015-0556 MEDIUM 5.8 UPGRADE MITIGATE Open-source ARJ archiver 3.10.22 allows remote attackers to conduct directory traversal attacks via a symlink
FAQ
How do I fix arj archiver vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is arj archiver being exploited right now?
None of the tracked arj archiver CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which arj archiver CVE should I patch first?
CVE-2015-2782 currently ranks highest (55/100): Buffer overflow in Open-source ARJ archiver 3.10.22 allows remote attackers to cause a denial of service (cras.