Active Exploitation of RARLAB's UnRAR Vulnerability

RARLAB has released a security patch to address a directory traversal vulnerability (CVE-2022-30333) in the UnRAR utility for Linux and Unix systems. There have been reports that this vulnerability is being actively exploited.

The affected product versions (only for Linux and Unix systems):

•     UnRAR versions 6.11 and below

Successful exploitation could allow an attacker to deploy a malicious file on the target system by extracting it to an arbitrary location during the unpack operation.

Administrators and users of affected products are advised to upgrade to the latest versions immediately.

References:

https://www.rarlab.com/rarnew.htm

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30333

https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/