Skip to content
OpenAdvisories

Package · Debian

bacula

6 known vulnerabilities.

6 results · Feed

  • Medium 6.0

    Heap-based Buffer Overflow in Bareos Director

    In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates t…

  • Unscored —

    The dump_resource function in dird/dird_conf.c in Bacula before 5.2.11 does not properly enforce ACL rules, which allow…

  • Unscored —

    mtx-changer.Adic-Scalar-24 in bacula-common 2.4.2 allows local users to overwrite arbitrary files via a symlink attack …

  • Unscored —

    make_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command line argument, and somet…

  • Unscored —

    bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary…

  • Unscored —

    zlib 1.2 and later versions allows remote attackers to cause a denial of service (crash) via a crafted compressed strea…