CVE-2022-3592 - AskarLabs CVE Database

CVE-2022-3592

Vendor N/A

Product samba

Weakness CWE-61

Published January 12, 2023

Last update April 8, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem.

Key dates

02Disclosure timeline

January 12, 2023 CVE published

April 8, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3592 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/61.html

Related vulnerabilities

04Related CVE

CVE-2026-21916 Junos OS: A low privileged user can escalate their privileges so that they can login as root CVE-2023-20093 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability CVE-2024-47515 Pagure: generate_archive() follows symbolic links in temporary clones CVE-2025-62596 youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects CVE-2026-41579 runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations