Medium severity6.5NVD Advisory· Published Jan 12, 2023· Updated Jun 17, 2026
CVE-2022-3592
CVE-2022-3592
Description
A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*range: >=4.17.0,<4.17.2
- (no CPE)
- (no CPE)
cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
- osv-coordsRange: < 4.17.2+git.273.a55a83528b9-1.1
Patches
Vulnerability mechanics
References
4- access.redhat.com/security/cve/CVE-2022-3592nvdThird Party Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
- www.samba.org/samba/security/CVE-2022-3592.htmlnvdVendor Advisory
- security.gentoo.org/glsa/202309-06nvd
News mentions
0No linked articles in our index yet.