Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Debian 11: DLA-3880-1 Critical: Amanda Privilege Escalation Issues

debian lts
Calendar Grey September 7, 2024
Dist Debian Esm H88
Several security flaws addressed in Amanda backup solution for Debian LTS. Comprehensive details on advisories and patches included.
Multiple vulnerabilities have been fixed in the Amanda backup system
Topics%20covered

Topics Covered

security advisory software update debian privilege escalation amanda directory disclosure

Summary

CVE-2022-37703

Directory existence disclosure

CVE-2022-37704

Privilege escalation in rundump

CVE-2022-37705

Privilege escalation in runtar

CVE-2023-30577

Privilege escalation in runtar

For Debian 11 bullseye, these problems have been fixed in version
1:3.5.1-7+deb11u1.

We recommend that you upgrade your amanda packages.

For the detailed security status of amanda please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/amanda

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: amanda
Version: 1:3.5.1-7+deb11u1
CVE ID: CVE-2022-37703 CVE-2022-37704 CVE-2022-37705 CVE-2023-30577
Debian Bug: 1021017 1029829 1055253

Topics%20covered

Topics Covered

security advisory software update debian privilege escalation amanda directory disclosure

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here