Skip to content
OpenAdvisories
High DLA-3880-1 4 CVEs

amanda - security update

Published Sep 7, 2024 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 amanda 1:3.5.1-7+deb11u1

Vulnerabilities 4

  • High 7.8
    CVE-2023-30577

    AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for …

    amanda amanda Debian Ubuntu
  • Medium 6.7
    CVE-2022-37704 Public exploit

    Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/r…

    amanda amanda Debian Ubuntu
  • Unscored —
    CVE-2022-37703 Public exploit

    In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vu…

    amanda amanda Debian Ubuntu
  • Unscored —
    CVE-2022-37705 Public exploit

    A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnera…

    amanda amanda Debian Ubuntu