Summary
It was discovered that amanda did not properly check certain arguments. A
local unprivileged attacker could possibly use this issue to perform a
privilege escalation attack.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | amanda | 1:3.5.1-2ubuntu0.4 |
| Ubuntu · 22.04 LTS 22.04:LTS | amanda | 1:3.5.1-8ubuntu1.4 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | amanda | 1:3.5.1-1ubuntu0.3+esm1 |
Vulnerabilities 1
-
High 7.8
AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for …
References
-
report
https://ubuntu.com/security/CVE-2023-30577