Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Mageia 8 & 9 MGASA-2023-0258 Critical Remote Execution Patch

mageia
Calendar Grey September 11, 2023
Scroller Mageia
Revised unrar distributions resolve a significant remote code execution vulnerability in Mageia 8 and 9, as specified in MGASA-2023-0258.
Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability

Summary

Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability. (CVE-2023-40477)

References

- https://bugs.mageia.org/show_bug.cgi?id=32205

- https://lists.debian.org/debian-lts-announce/2023/08/msg00023.html

- https://www.cve.org/CVERecord?id=CVE-2023-40477

Topics%20covered

Topics Covered

security advisory critical code execution remote execution patch mageia unrar

Resolution

SRPMS

- 9/nonfree/unrar-6.23-1.mga9.nonfree

- 8/nonfree/unrar-6.23-1.mga8.nonfree

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 11 Sep 2023
URL: https://advisories.mageia.org/MGASA-2023-0258.html
Type: security
CVE: CVE-2023-40477

Topics%20covered

Topics Covered

security advisory critical code execution remote execution patch mageia unrar

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.