Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

Debian 9: DLA-2353-1 Critical: Bacula Denial Of Service Issue

debian lts
Calendar Grey August 29, 2020
Dist Debian Esm H88
A critical vulnerability detected in bacula enables denial of service due to heap overflow triggered by excessively large strings. Immediate upgrade is advised.
An issue has been found in bacula, a network backup service
Topics%20covered

Topics Covered

security advisory denial of service debian heap overflow memory issue bacula August 2020

Summary

An issue has been found in bacula, a network backup service.
By sending oversized digest strings a malicious client can cause a heap
overflow in the director's memory which results in a denial of service.


For Debian 9 stretch, this problem has been fixed in version
7.4.4+dfsg-6+deb9u2.

We recommend that you upgrade your bacula packages.

For the detailed security status of bacula please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/bacula

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: bacula
Version: 7.4.4+dfsg-6+deb9u2
CVE ID: CVE-2020-11061
Debian Bug:

Topics%20covered

Topics Covered

security advisory denial of service debian heap overflow memory issue bacula August 2020

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here