PatchTheCVEunrar-free vulnerabilities and fixes
Recent CVEs affecting unrar-free, with upgrade or downgrade steps. 2 tracked.
Also searched as: unrar free.
unrar-free has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-07-12. Highest priority: CVE-2017-11189 (score 45/100).
- CVE-2017-11190 HIGH 7.8 DOWNGRADE unrarlib.c in unrar-free 0.0.1, when _DEBUG_LOG mode is enabled, might allow remote attackers to cause a denia
- CVE-2017-11189 MEDIUM 6.5 DOWNGRADE unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer derefer
FAQ
How do I fix unrar-free vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is unrar-free being exploited right now?
None of the tracked unrar-free CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which unrar-free CVE should I patch first?
CVE-2017-11189 currently ranks highest (45/100): unrarlib.c in unrar-free 0.0.1 might allow remote attackers to cause a denial of service (NULL pointer derefer.