CVE-2024-33899 Other in n/a
Attackers can spoof screen output or cause denial of service in WinRAR on Linux and UNIX via ANSI escape sequences.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2024-33899?
CVE-2024-33899 is a high-severity vulnerability in n/a, published on 28 Apr 2024. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
RARLAB WinRAR before 7.00, on Linux and UNIX platforms, allows attackers to spoof the screen output, or cause a denial of service, via ANSI escape sequences.
Weakness: CWE-150
Which versions are affected by CVE-2024-33899?
It affects 1 product.
Linux distribution packages (3)
unrar SUSE:Linux Enterprise Server 12 SP5 | All versions | 5.6.1-4.11.1 |
unrar SUSE:Linux Enterprise Server for SAP Applications 12 SP5 | All versions | 5.6.1-4.11.1 |
unrar SUSE:Linux Enterprise Software Development Kit 12 SP5 | All versions | 5.6.1-4.11.1 |
Products include Rarlab Winrar.
How do I fix CVE-2024-33899?
Upgrade to a fixed version.
Is CVE-2024-33899 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-33899 exists.
Other vulnerabilities in n/a
Sources
Also known as DEBIAN-CVE-2024-33899, GHSA-7m59-rfr2-gh4p, SUSE-SU-2024:1975-1, UBUNTU-CVE-2024-33899.