Skip to content
OpenAdvisories

Package · Alpine

bareos

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.8
    CVE-2020-4042

    Authentication bypass in Bareos

    Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director without knowledge of the shared secret if the director allows client initiated connection and connects to the client itself. The malicious client can replay th…

    bareos bareos bareos bareos Ubuntu Alpine
  • Medium 6.0
    CVE-2020-11061

    Heap-based Buffer Overflow in Bareos Director

    In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates t…

    Bareos GmbH & Co. KG Bareos Director bacula bareos Debian Ubuntu Alpine