CVE catalog

CVE-2022-37704

amanda: CVE-2022-37704

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.53% · Oct 25, 2026

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianamandasid1:3.5.4-2.2fixed
Debianamandaforky1:3.5.4-2.2fixed
Debianamandatrixie1:3.5.4-2fixed
Debianamandabookworm1:3.5.1-11+deb12u2fixed
Ubuntuamandapro1:3.3.6-4vulnerable
Ubuntuamandapro1:3.3.6-4.1vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1+actuallyesm2vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1+esm1vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1+esm2vulnerable
Ubuntuamanda18.041:3.3.9-5build1vulnerable
Ubuntuamanda18.041:3.5-2vulnerable
Ubuntuamanda18.041:3.5.1-1vulnerable
Ubuntuamanda18.041:3.5.1-1build1vulnerable
Ubuntuamanda18.041:3.5.1-1build2vulnerable
Ubuntuamanda18.041:3.5.1-1ubuntu0.1vulnerable
Ubuntuamanda18.041:3.5.1-1ubuntu0.2vulnerable
Ubuntuamanda18.041:3.5.1-1ubuntu0.3fixed
Ubuntuamanda20.041:3.5.1-2build2vulnerable
Ubuntuamanda20.041:3.5.1-2build3vulnerable
Ubuntuamanda20.041:3.5.1-2ubuntu0.1vulnerable
Ubuntuamanda20.041:3.5.1-2ubuntu0.2vulnerable
Ubuntuamanda20.041:3.5.1-2ubuntu0.3fixed
Ubuntuamanda22.041:3.5.1-5ubuntu1vulnerable
Ubuntuamanda22.041:3.5.1-8vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1.1vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1.2vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1.3fixed
Suseamandapackage hub 15 sp43.5.1-bp154.3.3.1fixed
Opensuseamandaleap 15.43.5.1-bp154.3.3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianamandasourcesid1:3.5.1-10not yet assignedNot reported[1029829]
Debianamandasourceforky1:3.5.1-10not yet assignedNot reported[1029829]
Debianamandasourcetrixie1:3.5.1-10not yet assignedNot reported[1029829]
Debianamandasourcebookworm1:3.5.1-10not yet assignedNot reported[1029829]
Ubuntuamandadeb18.041:3.5.1-1ubuntu0.3Not reportedUBUNTU-CVE-2022-37704Not reported
Ubuntuamandadeb20.041:3.5.1-2ubuntu0.3Not reportedUBUNTU-CVE-2022-37704Not reported
Ubuntuamandadeb22.041:3.5.1-8ubuntu1.3Not reportedUBUNTU-CVE-2022-37704Not reported
Suseamandarpmpackage hub 15 sp43.5.1-bp154.3.3.1Not reportedOPENSUSE-SU-2023:0069-1Not reported
Opensuseamandarpmleap 15.43.5.1-bp154.3.3.1Not reportedOPENSUSE-SU-2023:0069-1Not reported

[Debian bug #1029829]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [amanda-client]Fixed

    Source package: [amanda]

    Details (2)

    • 1:3.5.1-11+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

    • 1:3.5.1-11+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

  • [amanda-common]Fixed

    Source package: [amanda]

    Details (2)

    • 1:3.5.1-11+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

    • 1:3.5.1-11+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

  • [amanda-server]Fixed

    Source package: [amanda]

    Details (2)

    • 1:3.5.1-11+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

    • 1:3.5.1-11+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]