CVE-2022-30333—RARLAB UnRAR Directory Traversal Vulnerability

PUBLISHEDvulnerability record
2022-08-09 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2022-30333
Project:
RARLAB
Product:
UnRAR
Date Added:
2022-08-09
Due Date:
2022-08-30
Last Updated:
June 21, 2025

Vulnerability Name

RARLAB UnRAR Directory Traversal Vulnerability

Description

RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • Vulnerability updated with version 6.12. Accessing link will download update information: https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz
  • https://nvd.nist.gov/vuln/detail/CVE-2022-30333

Related Weaknesses

browse all CVEs