{
  "cveId": "CVE-2022-22995",
  "url": "https://patchblox.com/security/cve/CVE-2022-22995",
  "summary": "CVE-2022-22995 is fixed in netatalk on 1 platform, first by netatalk 3.1.12~ds-4ubuntu0.20.04.3\u002Besm1, released March 25, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "netatalk: The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of f...",
  "description": "The combination of primitives offered by SMB and AFP in their default configuration allows the arbitrary writing of files. By exploiting these combination of primitives, an attacker can execute arbitrary code.",
  "published": "2022-03-25T16:15:00Z",
  "severity": "Medium",
  "cvss": 9.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.02735,
  "epssPercentile": 0.862,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "netatalk",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "3.1.12~ds-8\u002Bdeb11u2",
      "fix": "DLA-3968-1",
      "url": "https://patchblox.com/security/fix/linux/dla-3968-1",
      "released": "2024-11-28T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "netatalk",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "3.1.18~ds-1",
      "fix": "DEBIAN-CVE-2022-22995",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-22995",
      "released": "2022-03-25T23:15:08Z"
    },
    {
      "platform": "linux",
      "product": "netatalk",
      "release": "Debian 14",
      "fixedVersion": "3.1.18~ds-1",
      "fix": "DEBIAN-CVE-2022-22995",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-22995",
      "released": "2022-03-25T23:15:08Z"
    },
    {
      "platform": "linux",
      "product": "netatalk",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "3.1.12~ds-4ubuntu0.20.04.3\u002Besm1",
      "fix": "netatalk 3.1.12~ds-4ubuntu0.20.04.3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-netatalk-3.1.12-ds-4ubuntu0.20.04.3-esm1",
      "released": "2022-03-25T16:15:00Z"
    },
    {
      "platform": "linux",
      "product": "netatalk",
      "release": "Ubuntu 22.04.1 LTS (jammy)",
      "fixedVersion": "3.1.12~ds-9ubuntu0.22.04.3\u002Besm1",
      "fix": "netatalk 3.1.12~ds-9ubuntu0.22.04.3\u002Besm1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-jammy-netatalk-3.1.12-ds-9ubuntu0.22.04.3-esm1",
      "released": "2022-03-25T16:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}