CVE-2022-37704

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/d...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

État des correctifs par distribution

Paquets corrigés publiés par chaque distribution pour cette CVE

Debian DEBIAN-CVE-2022-37704 amanda Corrigé dans: 1:3.5.1-7+deb11u1

Références

advisory github.com
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory lists.fedoraproject.org
advisory nvd.nist.gov
package github.com
patch github.com
patch github.com
report github.com
web amanda.org
web github.com
web lists.debian.org
web marc.info
web lists.debian.org