CVE catalog

CVE-2022-37705

amanda: CVE-2022-37705

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
1.26% · Oct 25, 2026

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the arguments passed to tar binary (it expects that the argument name and value are separated with a space; however, separating them with an equals sign is also supported),

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianamandasid1:3.5.4-2.2fixed
Debianamandaforky1:3.5.4-2.2fixed
Debianamandatrixie1:3.5.4-2fixed
Debianamandabookworm1:3.5.1-11+deb12u2fixed
Ubuntuamandapro1:3.3.6-4vulnerable
Ubuntuamandapro1:3.3.6-4.1vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1+actuallyesm2vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1+esm1vulnerable
Ubuntuamandapro1:3.3.6-4.1ubuntu0.1+esm2vulnerable
Ubuntuamanda18.041:3.3.9-5build1vulnerable
Ubuntuamanda18.041:3.5-2vulnerable
Ubuntuamanda18.041:3.5.1-1vulnerable
Ubuntuamanda18.041:3.5.1-1build1vulnerable
Ubuntuamanda18.041:3.5.1-1build2vulnerable
Ubuntuamanda18.041:3.5.1-1ubuntu0.1vulnerable
Ubuntuamanda18.041:3.5.1-1ubuntu0.2vulnerable
Ubuntuamanda18.041:3.5.1-1ubuntu0.3fixed
Ubuntuamanda20.041:3.5.1-2build2vulnerable
Ubuntuamanda20.041:3.5.1-2build3vulnerable
Ubuntuamanda20.041:3.5.1-2ubuntu0.1vulnerable
Ubuntuamanda20.041:3.5.1-2ubuntu0.2vulnerable
Ubuntuamanda20.041:3.5.1-2ubuntu0.3fixed
Ubuntuamanda22.041:3.5.1-5ubuntu1vulnerable
Ubuntuamanda22.041:3.5.1-8vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1.1vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1.2vulnerable
Ubuntuamanda22.041:3.5.1-8ubuntu1.3fixed
Opensuseamandatumbleweed3.5.2-3.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianamandasourcesid1:3.5.1-10not yet assignedNot reported[1029829]
Debianamandasourceforky1:3.5.1-10not yet assignedNot reported[1029829]
Debianamandasourcetrixie1:3.5.1-10not yet assignedNot reported[1029829]
Debianamandasourcebookworm1:3.5.1-10not yet assignedNot reported[1029829]
Ubuntuamandadeb18.041:3.5.1-1ubuntu0.3Not reportedUBUNTU-CVE-2022-37705Not reported
Ubuntuamandadeb20.041:3.5.1-2ubuntu0.3Not reportedUBUNTU-CVE-2022-37705Not reported
Ubuntuamandadeb22.041:3.5.1-8ubuntu1.3Not reportedUBUNTU-CVE-2022-37705Not reported
Opensuseamandarpmtumbleweed3.5.2-3.1Not reportedOPENSUSE-SU-2024:12706-1Not reported

[Debian bug #1029829]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [amanda-client]Fixed

    Source package: [amanda]

    Details (2)

    • 1:3.5.1-11+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

    • 1:3.5.1-11+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

  • [amanda-common]Fixed

    Source package: [amanda]

    Details (2)

    • 1:3.5.1-11+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

    • 1:3.5.1-11+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

  • [amanda-server]Fixed

    Source package: [amanda]

    Details (2)

    • 1:3.5.1-11+deb12u2 · amd64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

    • 1:3.5.1-11+deb12u2 · arm64 · bookworm

      Fixed · Fixed: 1:3.5.1-10

      dsa · amanda · debian · bookworm

[openSUSE Tumbleweed]

  • [amanda]Fixed

    Source package: [amanda]

    Details (1)

    • 3.5.4-6.7 · x86_64 · tumbleweed

      Fixed · Fixed: 3.5.2-3.1

      dsa · amanda · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]