CVE-2022-22995

Summary

The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

Affected Software

Weaknesses

• CWE-59: CWE-59 Improper Link Resolution Before File Access ('Link Following')

ADP Enrichment

CVE Program Container

Additional References

• https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
• https://security.gentoo.org/glsa/202311-02
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
• https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html
• https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html

References

• https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/
• https://security.gentoo.org/glsa/202311-02
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/
• https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html

• ←Previous
• Next→