nwaples rardecode Denial-of-Service Vulnerability Due to Improper Dictionary Size Handling

A denial-of-service vulnerability has been identified in nwaples rardecode versions through 2.1.1. The issue arises because the software fails to properly restrict dictionary sizes when processing large RAR files. This flaw allows an attacker to craft a RAR file that, when opened with the affected software, causes excessive memory usage, leading to an out-of-memory crash.

Impact

Exploitation of this vulnerability causes an out-of-memory crash, leading to a denial-of-service condition.

Remediation

Users can upgrade to nwaples rardecode version 2.2.0 or later, where this vulnerability has been addressed.