cyfenced.com →

[ CVE-2022-30333 · Published 9 May 2022 ]

RARLAB UnRAR Directory Traversal Vulnerability

Exploited · CISA KEV CVSS 7.5 EPSS 99%Fix available

[ Why it matters ]Priority signals

  • Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-08-09
  • Known to be used in ransomware campaigns
  • EPSS: 99% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a ~/.ssh/authorized_keys file. NOTE: WinRAR and Android RAR are unaffected.

CISA: RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 30 Aug 2022): Apply updates per vendor instructions.

[ References ]References