Search for packages
| purl | pkg:deb/debian/bacula@1.38.11-8 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-dasb-atv1-53ck
Aliases: CVE-2020-11061 |
In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10. |
Affected by 0 other vulnerabilities. |
|
VCID-k9yc-qbqn-uyaf
Aliases: CVE-2008-5373 |
bacula-common: Insecure temporary file use in autochangers (symlink attack) |
Affected by 3 other vulnerabilities. |
|
VCID-p2nz-7xyf-jqbw
Aliases: CVE-2012-4430 |
A vulnerability in Bacula may allow remote attackers to obtain sensitive information. |
Affected by 1 other vulnerability. |
|
VCID-v7mu-11py-d7ek
Aliases: CVE-2007-5626 |
A vulnerability in Bacula may allow local attackers to obtain sensitive information. |
Affected by 2 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1vu9-xzw9-kfe2 | zlib DoS |
CVE-2005-2096
|
| VCID-497r-ewba-b7a3 | bacula 1.36.3 and earlier allows local users to modify or read sensitive files via symlink attacks on (1) the temporary file used by autoconf/randpass when openssl is not available, or (2) the mtx.[PID] temporary file in mtx-changer.in. |
CVE-2005-2995
|