CVE-2022-22995

    Dashboard / Vulnerabilities / CVE-2022-22995

    CVE-2022-22995

    Published: 25 Mar 2022Last Modified: 8 Jul 2026

    Summary:

    Details: The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.

    References: https://lists.debian.org/debian-lts-announce/2024/01/msg00000.html, https://lists.debian.org/debian-lts-announce/2024/11/msg00026.html, https://www.westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities, https://security.gentoo.org/glsa/202311-02, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/55ROUJI22SHZX5EM23QAILZHI67EZQKW/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T5CZZLFOTUP3QYHGHSDUNENGSLPJ6KGO/, https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2/

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -4be6b7fd47045601e97ad3f180f1164615f25a4d

    Affected versions

    netatalk-3-1-17

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2022-22995 | CVE-DB