PT-2022-15765 · Afp+5 · Afp+5

Corentin Bayet + 4 · Published 2022-03-25 · Updated 2024-12-26 · CVE-2022-22995

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions SMB and AFP (affected versions not specified)

Description The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting this combination of primitives, an attacker can execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Link Following

Weakness Enumeration

CWE-59

Related Identifiers

ALT-PU-2023-6197

ALT-PU-2024-10857

ALT-PU-2024-17688

CVE-2022-22995

DLA-3706-1

DLA-3968-1

MGASA-2024-0201

SUSE-SU-2023:4084-1

SUSE-SU-2023_4084-1

USN-6786-1

Affected Products

Afp

Alt Linux

Linuxmint

Smb

Suse

Ubuntu

References · 31

• https://osv.dev/vulnerability/UBUNTU-CVE-2022-22995 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-22995 · Security Note
• https://osv.dev/vulnerability/USN-6786-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-22995 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-22995 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2024-0201 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XO34FWOIJI6V6PH2XY52WNBBARVWPJG2 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3706-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3968-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-22995 · Vendor Advisory
• https://westerndigital.com/support/product-security/wdc-22005-netatalk-security-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4084-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22995 · Security Note
• https://advisories.mageia.org/MGASA-2024-0201.html · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/677321 · Security Note