PT-2025-41556 · Rardecode · Rardecode

Doyensec + 1 · Publicado 2025-10-10 · Atualizado 2026-05-23 · CVE-2025-11579

Positive Technologies (AI Summary) · Pt

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do rardecode 2.1.1 e anteriores

Descrição O software não limita adequadamente o tamanho do dicionário ao processar arquivos RAR. Um atacante pode explorar essa falha fornecendo um arquivo RAR especialmente criado com um tamanho de dicionário grande, resultando em uma Negação de Serviço devido a uma falha por esgotamento de memória.

Recomendações Atualize para uma versão superior à 2.1.1.

Correção

DoS

Missing Authentication

Enumeração de Fraquezas

CWE-306

CWE-789

Identificadores relacionados

CLEANSTART-2026-BU65096

CLEANSTART-2026-ET12387

CLEANSTART-2026-FV86809

CLEANSTART-2026-GN78570

CLEANSTART-2026-JG72006

CLEANSTART-2026-NR54556

CLEANSTART-2026-UD70996

CLEANSTART-2026-VT65447

CVE-2025-11579

GHSA-RWVP-R38J-9RGG

GO-2025-4020

OPENSUSE-SU-2025:15710-1

OPENSUSE-SU-2025:15722-1

OPENSUSE-SU-2025:20160-1

OPENSUSE-SU-2026:10844-1

Produtos afetados

Rardecode

Referências · 201

• https://github.com/nwaples/rardecode/commit/52fb4e825c936636f251f7e7deded39ab11df9a9 · Correção
• https://github.com/nwaples/rardecode · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ET12387.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NR54556.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GN78570.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UD70996.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-VT65447.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BU65096.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-FV86809.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-JG72006.json · Nota
• https://t.me/CVEtracker/34583 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Nota de Segurança
• https://reddit.com/r/VulnMatter/comments/1o42xq1/resumen_diario_de_vulnerabilidades_11102025 · Publicação no Reddit
• https://bugzilla.suse.com/1251891 · Nota
• https://suse.com/security/cve/CVE-2024-45338 · Nota