CVE-2022-22995
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2022-22995
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-22995.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2022-22995
- Downstream
- Related
- Published
- 2022-03-25T23:15:08Z
- Modified
- 2025-07-29T10:22:44.507372Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.
- References
-
- https://security.gentoo.org/glsa/202311-02
- https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
- https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html
- https://security-tracker.debian.org/tracker/CVE-2022-22995
Affected packages
Debian:11 / netatalk
Package
- Name
- netatalk
- Purl
- pkg:deb/debian/netatalk?arch=source
Debian:13 / netatalk
Package
- Name
- netatalk
- Purl
- pkg:deb/debian/netatalk?arch=source