CVE-2022-30333criticalunder attackransomwareCWE-22CWE-59

CVE-2022-30333

Published · Updated

Follow this CVE+ Monitor UnRAR+ Monitor unrar-nonfree

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 99%
from disclosure to weapon57 days
Published on NVDMay 9
1st PoC+57d
metasploit+50d
CISA KEV+92d
Action required by CISAfederal deadline: 2022-08-30

Apply updates per vendor instructions.

In short

UnRAR versions before 6.12 on Linux and UNIX have a flaw that lets attackers write files outside the intended folder when extracting RAR archives, potentially creating or modifying sensitive files like SSH keys. This could allow unauthorized access to a system.

Technical detail

A path traversal vulnerability (CWE-22, CWE-59) in UnRAR <6.12 on Linux/UNIX allows arbitrary file write during extraction when processing specially crafted RAR archives. An attacker can exploit this by providing a malicious archive that writes to locations outside the extraction directory (e.g., ~/.ssh/authorized_keys), bypassing directory constraints and enabling privilege escalation or unauthorized access.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.