CVE-2022-1664

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

3.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 87.8% of scored records. A rank, not a probability.

NVD base score

9.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2022-05-26 08:20Z4 YR AGO

Last updated

2024-09-17 02:16Z2 YR AGO

Reserved

2022-05-10

Assigning CNA

debian

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Base

Data version

5.1

Document digest

5cfcc1f2fef7712f13cf7bbe679e40933c2aba3ca5094dd8ad1330122e339095

• git.dpkg.orghttps://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=7a6c03cb34d4a09f35df2f10779cbf1b70a5200b
• git.dpkg.orghttps://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=58814cacee39c4ce9e2cd0e3a3b9b57ad437eff5
• git.dpkg.orghttps://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=1f23dddc17f69c9598477098c7fb9936e15fa495
• git.dpkg.orghttps://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=faa4c92debe45412bfcf8a44f26e827800bb24be
• lists.debian.orghttps://lists.debian.org/debian-security-announce/2022/msg00115.html
• lists.debian.orghttps://lists.debian.org/debian-lts-announce/2022/05/msg00033.html
• security.netapp.comhttps://security.netapp.com/advisory/ntap-20221007-0002/