Log in Start free

Vulnerability · Published Apr 16, 2023 · Assigned by mitre

CVE-2022-37704

Medium 6.7

In plain English

A medium-severity command injection in the amanda package (Debian). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.5%top 55.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Public PoC

Official description

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12amanda1:3.5.1-10DEBIAN-CVE-2022-37704
Debian:13amanda1:3.5.1-10DEBIAN-CVE-2022-37704
Debian:14amanda1:3.5.1-10DEBIAN-CVE-2022-37704
Ubuntu:22.04:LTSamanda1:3.5.1-8ubuntu1.1USN-5966-1
Ubuntu:22.04:LTSamanda1:3.5.1-8ubuntu1.3USN-5966-3
Ubuntu:22.04:LTSamanda1:3.5.1-8ubuntu1.3UBUNTU-CVE-2022-37704

Affected products (as reported)

VendorProductVersions
n/a n/a n/a

Weakness: CWE-77 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References