PT-2022-2560 · Unrar+6 · Unrar+6

Published 2022-05-07 · Updated 2026-01-19 · CVE-2022-30333

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions UnRAR versions prior to 6.12

Description The issue allows directory traversal to write to files during an extract operation, as demonstrated by creating a ~/.ssh/authorized keys file. This can be exploited by remote attackers to execute arbitrary code on vulnerable instances. The problem is not present in WinRAR and Android RAR.

Recommendations For UnRAR versions prior to 6.12, update to version 6.12 or later to resolve the issue. As a temporary workaround, consider restricting access to the UnRAR utility until a patch is applied. Avoid using UnRAR to extract archives from untrusted sources until the issue is resolved.

Exploit

Fix

Path traversal

Link Following

Weakness Enumeration

CWE-22

CWE-59

Related Identifiers

ALT-PU-2022-1866

ALT-PU-2022-1959

ALT-PU-2022-2424

ALT-PU-2025-5948

BDU:2022-02992

CVE-2022-30333

DLA-3534-1

MGASA-2022-0206

SUSE-SU-2022:1760-1

SUSE-SU-2022_1760-1

USN-6569-1

USN-7349-1

USN-7350-1

Affected Products

Alt Linux

Astra Linux

Linuxmint

Red Os

Suse

Ubuntu

Unrar

References · 78

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/zimbra_unrar_cve_2022_30333.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/fileformat/unrar_cve_2022_30333.rb · Exploit
• 🔥 https://github.com/rbowes-r7/unrar-cve-2022-30333-poc · Exploit
• 🔥 https://github.com/TheL1ghtVn/CVE-2022-30333-PoC · Exploit
• 🔥 https://github.com/aslitsecurity/Zimbra-CVE-2022-30333 · Exploit
• 🔥 http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html · Exploit
• 🔥 https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day · Exploit
• https://ubuntu.com/security/CVE-2022-30333 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2022-1121SE47 · Vendor Advisory
• https://security.gentoo.org/glsa/202309-04 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7349-1 · Vendor Advisory
• https://rarlab.com/rar/rarlinux-x32-612.tar.gz · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-30333 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02992 · Security Note
• https://advisories.mageia.org/MGASA-2022-0206.html · Security Note