Name: CVE-2022-22995: Improper Link Resolution Before File Access
Creator: Rapid7
Published: 2022-03-25T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2022-22995, CWE-59, CVSS 10, EPSS 0.02735

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

CVSS Details

CVSS 3.1 Base Score: 10
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Alpine Linux	—	Upgrade netatalk	Aug 22, 2024	Mar 25, 2022
Debian	—	Upgrade netatalk	Jan 8, 2024	Mar 25, 2022
Gentoo Linux	—	Upgrade net-fs/netatalk.	Nov 2, 2023	Mar 25, 2022
Suse	—	Upgrade netatalk-develUpgrade netatalkUpgrade libatalk12	Oct 17, 2023	Mar 25, 2022
Ubuntu	—	Upgrade netatalk (Ubuntu Pro)	Jun 6, 2024	Mar 25, 2022

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence