Lucene search
Redhat.comRH:CVE-2022-37704HistoryFeb 07, 2023 - 12:57 p.m.
CVE-2022-37704
2023-02-0712:57:44
redhat.com
access.redhat.com
10
amanda
flaw
privilege escalation
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
A flaw was found in Amanda. The rundump SUID binary executes /usr/sbin/dump as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user “amandabackup” to root.
Related
debiancve
debiancve
CVE-2022-37704
2023-04-16 01:15:06
osv
osv
CVE-2022-37704
2023-04-16 01:15:06
amanda - security update
2023-02-21 00:00:00
amanda regression
2023-04-03 02:46:52
cvelist
cvelist
CVE-2022-37704
2023-04-16 00:00:00
ubuntucve
ubuntucve
CVE-2022-37704
2023-01-30 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3330-1)
2023-02-22 00:00:00
Ubuntu: Security Advisory (USN-5966-3)
2023-04-03 00:00:00
Ubuntu: Security Advisory (USN-5966-2)
2023-03-24 00:00:00
cve
cve
CVE-2022-37704
2023-04-16 01:15:06
debian
debian
[SECURITY] [DLA 3330-1] amanda security update
2023-02-21 22:00:15
nessus
nessus
Debian DLA-3330-1 : amanda - LTS security update
2023-02-22 00:00:00
openSUSE 15 Security Update : amanda (openSUSE-SU-2023:0069-1)
2023-03-15 00:00:00
Fedora 38 : amanda (2023-3d0619d767)
2023-04-02 00:00:00
prion
prion
Information disclosure
2023-04-16 01:15:00
nvd
nvd
CVE-2022-37704
2023-04-16 01:15:06
ubuntu
ubuntu
amanda regression
2023-04-03 00:00:00
amanda vulnerabilities
2023-03-23 00:00:00
amanda regression
2023-03-23 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: amanda-3.5.3-1.fc37
2023-04-02 02:01:08
[SECURITY] Fedora 38 Update: amanda-3.5.3-1.fc38
2023-04-02 00:17:09
[SECURITY] Fedora 36 Update: amanda-3.5.3-1.fc36
2023-04-02 01:34:44
6.7 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
5.1%
Related for RH:CVE-2022-37704