PT-2018-17281 · Igor Pavlov+2 · 7-Zip+3

Zeeman206 · Published 2017-12-29 · Updated 2025-01-10 · CVE-2018-5996

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: 7-Zip versions prior to 18.00 p7zip versions prior to 18.00

Description: The issue is related to insufficient exception handling in the method NCompress::NRar3::CDecoder::Code, which can lead to multiple memory corruptions within the PPMd code. This allows remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.

Recommendations: For 7-Zip versions prior to 18.00, update to version 18.00 or later to resolve the issue. For p7zip versions prior to 18.00, update to version 18.00 or later to resolve the issue.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2018-2591

AZL-35093

AZL-6784

BDU:2025-04908

CVE-2018-5996

OESA-2021-1294

OPENSUSE-SU-2018_0497-1

SUSE-SU-2018:0464-1

Affected Products

7-Zip

Alt Linux

Suse

P7Zip

References · 35

• 🔥 https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2018:0464-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2018-5996 · Security Note
• https://osv.dev/vulnerability/AZL-6784 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2018-5996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-5996 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2018-5996 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-35093 · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-5996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9296 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-17969 · Security Note
• https://osv.dev/vulnerability/CVE-2018-5996 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10115 · Security Note
• https://bdu.fstec.ru/vul/2025-04908 · Security Note
• https://osv.dev/vulnerability/ALPINE-CVE-2018-5996 · Vendor Advisory