Summary
USN-5966-1 fixed vulnerabilities in amanda. Unfortunately that update
caused a regression and was reverted in USN-5966-2. This update provides
security fixes for Ubuntu 22.10, Ubuntu 22.04 LTS, Ubuntu 20.04
LTS and Ubuntu 18.04 LTS.
We apologize for the inconvenience.
Original advisory details:
Maher Azzouzi discovered an information disclosure vulnerability in the
calcsize binary within amanda. calcsize is a suid binary owned by root that
could possibly be used by a malicious local attacker to expose sensitive
file system information. (CVE-2022-37703)
Maher Azzouzi discovered a privilege escalation vulnerability in the
rundump binary within amanda. rundump is a suid binary owned by root that
did not perform adequate sanitization of environment variables or
commandline options and could possibly be used by a malicious local
attacker to escalate privileges. (CVE-2022-37704)
Maher Azzouzi discovered a privilege escalation vulnerability in the runtar
binary within amanda. runtar is a suid binary owned by root that did not
perform adequate sanitization of commandline options and could possibly be
used by a malicious local attacker to escalate privileges. (CVE-2022-37705)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | amanda | 1:3.5.1-1ubuntu0.3 |
| Ubuntu · 20.04 LTS 20.04:LTS | amanda | 1:3.5.1-2ubuntu0.3 |
| Ubuntu · 22.04 LTS 22.04:LTS | amanda | 1:3.5.1-8ubuntu1.3 |
Vulnerabilities 3
-
Medium 6.7CVE-2022-37704 Public exploit
Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/r…
-
Unscored —CVE-2022-37703 Public exploit
In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vu…
-
Unscored —CVE-2022-37705 Public exploit
A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnera…