Skip to content
OpenAdvisories
High DLA-3681-1 3 CVEs

amanda - security update

Published Dec 3, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 amanda 1:3.5.1-2+deb10u2

Vulnerabilities 3

  • High 7.8

    AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for …

  • Unscored —
    CVE-2022-37703 Public exploit

    In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vu…

  • Unscored —
    CVE-2022-37705 Public exploit

    A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnera…