Bug 832040

Summary:	app-arch/p7zip mask rar use flag (CVE-2018-10115)
Product:	Gentoo Security	Reporter:	antisocrates <antisocrates>
Component:	Vulnerabilities	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description antisocrates 2022-01-25 12:59:54 UTC

"Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive."

Source: https://nvd.nist.gov/vuln/detail/CVE-2018-10115

7Zip rar use flag (which uses the rar decoder should be masked).

Comment 1 Sam James archtester

2022-01-25 18:06:15 UTC


*** This bug has been marked as a duplicate of bug 655270 ***