Vulnerability Details CVE-2022-30333
RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.913
EPSS Ranking 99.6%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Proposed Action
RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.
Ransomware Campaign
Known
References
- http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
- https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00022.html
- https://security.gentoo.org/glsa/202309-04
- https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz
- https://www.rarlab.com/rar_add.htm
- http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html
- https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/
- https://lists.debian.org/debian-lts-announce/2023/08/msg00022.html
- https://security.gentoo.org/glsa/202309-04
- https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz
- https://www.rarlab.com/rar_add.htm
Products affected by CVE-2022-30333
-
cpe:2.3:a:rarlab:unrar:0.0.1
-
cpe:2.3:a:rarlab:unrar:5.5.4
-
cpe:2.3:a:rarlab:unrar:5.5.6
-
cpe:2.3:a:rarlab:unrar:5.6.1.2
-
cpe:2.3:a:rarlab:unrar:5.6.1.3
-
cpe:2.3:a:rarlab:unrar:6.0.3
-
cpe:2.3:o:debian:debian_linux:10.0
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:opengroup:unix:-