CVE-2018-20250: rarlab winrar

csirt@kutim:~/threat-intel/cve/CVE-2018-20250

CVSS 7.8 · High KEV · sudah dieksploitasi Dipakai ransomware EPSS 96,0%

Kerentanan Absolute Path Traversal pada rarlab winrar. Skor CVSS 3.1 7.8 (High) menurut NVD. Masuk katalog KEV CISA pada 15 Februari 2022, artinya sudah terbukti dieksploitasi. Tercatat dipakai dalam kampanye ransomware.

Deskripsi (NVD)

In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with specific patterns, the destination (extraction) folder is ignored, thus treating the filename as an absolute path.

Rincian

Terbit di NVD: 5 Februari 2019
Terakhir diubah: 13 Agustus 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-36: Absolute Path Traversal
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
EPSS (30 hari): 96,0% peluang dieksploitasi; lebih tinggi dari 99,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: WinRAR Absolute Path Traversal Vulnerability
Masuk KEV: 15 Februari 2022
Tenggat CISA: 15 Agustus 2022 (untuk instansi federal AS)
Ransomware: Tercatat dipakai dalam kampanye ransomware
Tindakan wajib: Apply updates per vendor instructions.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
rarlab	winrar	Semua versi hingga 5.61

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-20250 pemerintah AS
http://packetstormsecurity.com/files/152618/RARLAB-WinRAR-ACE-Format-Input-Validation-Remote-Code-Execution.ht... exploit · advisory pihak ketiga · vdb entry
http://www.rapid7.com/db/modules/exploit/windows/fileformat/winrar_ace advisory pihak ketiga
http://www.securityfocus.com/bid/106948 broken link · advisory pihak ketiga · vdb entry
https://github.com/blau72/CVE-2018-20250-WinRAR-ACE exploit · advisory pihak ketiga
https://research.checkpoint.com/extracting-code-execution-from-winrar/ exploit · press/media coverage · advisory pihak ketiga
https://www.exploit-db.com/exploits/46552/ exploit · advisory pihak ketiga · vdb entry
https://www.exploit-db.com/exploits/46756/ exploit · advisory pihak ketiga · vdb entry
https://www.win-rar.com/whatsnew.html release notes

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.