Lucene search
Redhat.comRH:CVE-2022-37705HistoryFeb 07, 2023 - 12:57 p.m.
CVE-2022-37705
2023-02-0712:57:44
redhat.com
access.redhat.com
26
amanda
runtar
suid binary
privilege escalation
validation error
cve-2022-37705
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
18.0%
A flaw was found in Amanda. The runtar SUID binary executes /usr/bin/tar as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user “amandabackup” to root.
Related
nvd
nvd
CVE-2022-37705
2023-04-16 01:15:06
CVE-2023-30577
2023-07-26 17:15:10
cve
cve
CVE-2022-37705
2023-04-16 01:15:06
CVE-2023-30577
2023-07-26 17:15:10
prion
prion
Privilege escalation
2023-04-16 01:15:00
Code injection
2023-07-26 17:15:00
cvelist
cvelist
CVE-2022-37705
2023-04-16 00:00:00
CVE-2023-30577
2023-07-26 00:00:00
ubuntucve
ubuntucve
CVE-2022-37705
2023-01-30 00:00:00
CVE-2023-30577
2023-07-26 00:00:00
osv
osv
CVE-2022-37705
2023-04-16 01:15:06
CVE-2023-30577
2023-07-26 17:15:10
amanda regression
2023-04-03 02:46:52
debiancve
debiancve
CVE-2022-37705
2023-04-16 01:15:06
CVE-2023-30577
2023-07-26 17:15:10
openvas
openvas
Huawei EulerOS: Security Advisory for amanda (EulerOS-SA-2023-3112)
2023-11-09 00:00:00
Ubuntu: Security Advisory (USN-5966-3)
2023-04-03 00:00:00
Debian: Security Advisory (DLA-3681-1)
2023-12-04 00:00:00
nessus
nessus
EulerOS 2.0 SP8 : amanda (EulerOS-SA-2023-3112)
2024-01-16 00:00:00
openSUSE 15 Security Update : amanda (openSUSE-SU-2023:0069-1)
2023-03-15 00:00:00
openSUSE 15 Security Update : amanda (openSUSE-SU-2023:0205-1)
2023-08-05 00:00:00
cloudlinux
cloudlinux
amanda: Fix of 2 CVEs
2023-08-17 17:24:04
redhatcve
redhatcve
CVE-2023-30577
2023-08-08 18:19:48
ubuntu
ubuntu
amanda regression
2023-04-03 00:00:00
amanda vulnerabilities
2023-03-23 00:00:00
amanda regression
2023-03-23 00:00:00
debian
debian
[SECURITY] [DLA 3681-1] amanda security update
2023-12-03 09:48:38
amazon
amazon
Medium: amanda
2023-08-17 11:39:00
Medium: amanda
2023-08-17 11:58:00
fedora
fedora
[SECURITY] Fedora 36 Update: amanda-3.5.3-1.fc36
2023-04-02 01:34:44
[SECURITY] Fedora 38 Update: amanda-3.5.3-1.fc38
2023-04-02 00:17:09
[SECURITY] Fedora 37 Update: amanda-3.5.3-1.fc37
2023-04-02 02:01:08
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
18.0%
Related for RH:CVE-2022-37705