{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/36607?format=json","vulnerability_id":"VCID-gjr1-fc83-dfe6","summary":"An arbitrary file overwrite vulnerability has been discovered in RAR and UnRAR, potentially resulting in arbitrary code execution.","aliases":[{"alias":"CVE-2022-30333"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/937522?format=json","purl":"pkg:deb/debian/rar@2:6.20~b1-0.1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.20~b1-0.1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937523?format=json","purl":"pkg:deb/debian/rar@2:6.20-0.1~deb11u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.20-0.1~deb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1050164?format=json","purl":"pkg:deb/debian/rar@2:6.23-1~deb11u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gkjf-x8s7-57dn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1~deb11u1"},{"url":"http://public2.vulnerablecode.io/api/packages/937518?format=json","purl":"pkg:deb/debian/rar@2:6.23-1~deb11u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gkjf-x8s7-57dn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:6.23-1~deb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937516?format=json","purl":"pkg:deb/debian/rar@2:7.01-1~deb12u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.01-1~deb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937520?format=json","purl":"pkg:deb/debian/rar@2:7.11-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.11-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/937519?format=json","purl":"pkg:deb/debian/rar@2:7.20-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.20-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1103060?format=json","purl":"pkg:deb/debian/rar@2:7.22-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:7.22-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/941851?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/941843?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gkjf-x8s7-57dn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u3%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1051012?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:6.0.3-1%2Bdeb11u3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gkjf-x8s7-57dn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.0.3-1%252Bdeb11u3"},{"url":"http://public2.vulnerablecode.io/api/packages/941850?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:6.1.7-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.1.7-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/941841?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:6.2.6-1%2Bdeb12u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gkjf-x8s7-57dn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:6.2.6-1%252Bdeb12u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/941845?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:7.1.8-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.1.8-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/941844?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:7.2.5-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.2.5-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1062546?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:7.2.5-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.2.5-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/1088738?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:7.2.6-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:7.2.6-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/74523?format=json","purl":"pkg:ebuild/app-arch/rar@6.23","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/rar@6.23"},{"url":"http://public2.vulnerablecode.io/api/packages/74524?format=json","purl":"pkg:ebuild/app-arch/unrar@6.2.10","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/unrar@6.2.10"},{"url":"http://public2.vulnerablecode.io/api/packages/74525?format=json","purl":"pkg:ebuild/app-arch/unrar@6.23","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/app-arch/unrar@6.23"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1050152?format=json","purl":"pkg:deb/debian/rar@2.02-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8js-x7uu-wka5"},{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-pu5p-qncp-nyb9"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.02-2"},{"url":"http://public2.vulnerablecode.io/api/packages/1050153?format=json","purl":"pkg:deb/debian/rar@2.60-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8js-x7uu-wka5"},{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-pu5p-qncp-nyb9"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.60-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050154?format=json","purl":"pkg:deb/debian/rar@2.80-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8js-x7uu-wka5"},{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-pu5p-qncp-nyb9"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2.80-2"},{"url":"http://public2.vulnerablecode.io/api/packages/1050155?format=json","purl":"pkg:deb/debian/rar@3.30-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-b8js-x7uu-wka5"},{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-pu5p-qncp-nyb9"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@3.30-2"},{"url":"http://public2.vulnerablecode.io/api/packages/1050156?format=json","purl":"pkg:deb/debian/rar@1:3.7b1-2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@1:3.7b1-2"},{"url":"http://public2.vulnerablecode.io/api/packages/1050157?format=json","purl":"pkg:deb/debian/rar@1:3.8b3-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@1:3.8b3-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050158?format=json","purl":"pkg:deb/debian/rar@2:3.9.3-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:3.9.3-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050159?format=json","purl":"pkg:deb/debian/rar@2:4.0.b3-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.0.b3-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050160?format=json","purl":"pkg:deb/debian/rar@2:4.2.0-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.2.0-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050161?format=json","purl":"pkg:deb/debian/rar@2:4.2.0%2Bdfsg.1-0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-cnah-rewa-vfe5"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:4.2.0%252Bdfsg.1-0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050162?format=json","purl":"pkg:deb/debian/rar@2:5.4.0%2Bdfsg.1-0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:5.4.0%252Bdfsg.1-0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050163?format=json","purl":"pkg:deb/debian/rar@2:5.5.0-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/rar@2:5.5.0-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050185?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-pu5p-qncp-nyb9"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.2-0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/1050186?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:3.5.4-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-pu5p-qncp-nyb9"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.4-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050187?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-pu5p-qncp-nyb9"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.5.4-1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050188?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:3.8.2-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.8.2-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050189?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:3.9.10-1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:3.9.10-1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050190?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:4.1.4-1%2Bdeb7u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:4.1.4-1%252Bdeb7u1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050191?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050192?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%2Bdeb8u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.2.7-0.1%252Bdeb8u1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050193?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:5.3.2-1%2Bdeb9u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-bv1j-kw6x-2be3"},{"vulnerability":"VCID-f34r-6g94-kfbb"},{"vulnerability":"VCID-fgxb-t1tg-kyay"},{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-hfdc-gb8e-5ydx"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-k7bd-dhht-xqa2"},{"vulnerability":"VCID-puzg-hype-rqge"},{"vulnerability":"VCID-tsuy-3xvt-bqgv"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.3.2-1%252Bdeb9u1"},{"url":"http://public2.vulnerablecode.io/api/packages/1050194?format=json","purl":"pkg:deb/debian/unrar-nonfree@1:5.6.6-1%2Bdeb10u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-gjr1-fc83-dfe6"},{"vulnerability":"VCID-k4zz-huer-13hq"},{"vulnerability":"VCID-xz6c-axe8-8qbn"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/unrar-nonfree@1:5.6.6-1%252Bdeb10u1"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2022-30333","reference_id":"","reference_type":"","scores":[{"value":"0.92793","scoring_system":"epss","scoring_elements":"0.99767","published_at":"2026-05-15T12:55:00Z"},{"value":"0.92793","scoring_system":"epss","scoring_elements":"0.99766","published_at":"2026-05-14T12:55:00Z"},{"value":"0.92811","scoring_system":"epss","scoring_elements":"0.99762","published_at":"2026-04-13T12:55:00Z"},{"value":"0.92811","scoring_system":"epss","scoring_elements":"0.99763","published_at":"2026-04-18T12:55:00Z"},{"value":"0.92811","scoring_system":"epss","scoring_elements":"0.99766","published_at":"2026-05-09T12:55:00Z"},{"value":"0.92811","scoring_system":"epss","scoring_elements":"0.99764","published_at":"2026-04-21T12:55:00Z"},{"value":"0.92811","scoring_system":"epss","scoring_elements":"0.99767","published_at":"2026-05-07T12:55:00Z"},{"value":"0.92811","scoring_system":"epss","scoring_elements":"0.99765","published_at":"2026-04-24T12:55:00Z"},{"value":"0.92844","scoring_system":"epss","scoring_elements":"0.99765","published_at":"2026-04-04T12:55:00Z"},{"value":"0.92844","scoring_system":"epss","scoring_elements":"0.99764","published_at":"2026-04-02T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2022-30333"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30333","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-30333"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.6","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010837","reference_id":"1010837","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1010837"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012228","reference_id":"1012228","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012228"},{"reference_url":"https://security.gentoo.org/glsa/202309-04","reference_id":"GLSA-202309-04","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/"}],"url":"https://security.gentoo.org/glsa/202309-04"},{"reference_url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00022.html","reference_id":"msg00022.html","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/"}],"url":"https://lists.debian.org/debian-lts-announce/2023/08/msg00022.html"},{"reference_url":"https://www.rarlab.com/rar_add.htm","reference_id":"rar_add.htm","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/"}],"url":"https://www.rarlab.com/rar_add.htm"},{"reference_url":"https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz","reference_id":"rarlinux-x32-612.tar.gz","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/"}],"url":"https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz"},{"reference_url":"https://usn.ubuntu.com/6569-1/","reference_id":"USN-6569-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6569-1/"},{"reference_url":"https://usn.ubuntu.com/7349-1/","reference_id":"USN-7349-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7349-1/"},{"reference_url":"https://usn.ubuntu.com/7350-1/","reference_id":"USN-7350-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/7350-1/"},{"reference_url":"https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/","reference_id":"zimbra-pre-auth-rce-via-unrar-0day","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/"}],"url":"https://blog.sonarsource.com/zimbra-pre-auth-rce-via-unrar-0day/"},{"reference_url":"http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html","reference_id":"Zimbra-UnRAR-Path-Traversal.html","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"},{"value":"Attend","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:A/A:Y/T:P/P:M/B:A/M:M/D:A/2025-01-29T16:18:17Z/"}],"url":"http://packetstormsecurity.com/files/167989/Zimbra-UnRAR-Path-Traversal.html"}],"weaknesses":[],"exploits":[{"date_added":null,"description":"This module creates a RAR file that can be emailed to a Zimbra server\n          to exploit CVE-2022-30333. If successful, it plants a JSP-based\n          backdoor in the public web directory, then executes that backdoor.\n\n          The core vulnerability is a path-traversal issue in unRAR that can\n          extract an arbitrary file to an arbitrary location on a Linux system.\n\n          This issue is exploitable on the following versions of Zimbra, provided\n          UnRAR version 6.11 or earlier is installed:\n\n          * Zimbra Collaboration 9.0.0 Patch 24 (and earlier)\n          * Zimbra Collaboration 8.8.15 Patch 31 (and earlier)","required_action":null,"due_date":null,"notes":"Stability:\n  - crash-safe\nReliability:\n  - repeatable-session\nSideEffects:\n  - ioc-in-logs\n","known_ransomware_campaign_use":false,"source_date_published":"2022-06-28","exploit_type":null,"platform":"Linux","source_date_updated":null,"data_source":"Metasploit","source_url":"https://github.com/rapid7/metasploit-framework/tree/master/modules/exploits/linux/http/zimbra_unrar_cve_2022_30333.rb"},{"date_added":"2022-08-09","description":"RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to write to files during an extract (unpack) operation.","required_action":"Apply updates per vendor instructions.","due_date":"2022-08-30","notes":"Vulnerability updated with version 6.12. Accessing link will download update information: https://www.rarlab.com/rar/rarlinux-x32-612.tar.gz;  https://nvd.nist.gov/vuln/detail/CVE-2022-30333","known_ransomware_campaign_use":true,"source_date_published":null,"exploit_type":null,"platform":null,"source_date_updated":null,"data_source":"KEV","source_url":null}],"severity_range_score":"6.6 - 7.5","exploitability":"2.0","weighted_severity":"6.8","risk_score":10.0,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-gjr1-fc83-dfe6"}