https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T13:16:54.609131+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2022-37703 CVE-2022-37703 2026-10-03T13:16:54.848200+00:00

In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. The binary will use `opendir()` as root directly without checking the path, letting the attacker provide an arbitrary path.

 https://vulnerability.circl.lu/vuln/usn-5966-1 USN-5966-1 — amanda vulnerabilities 2026-10-03T13:16:54.848305+00:00

Affected: Ubuntu:14.04:LTS: amanda, Ubuntu:16.04:LTS: amanda, Ubuntu:18.04:LTS: amanda, Ubuntu:20.04:LTS: amanda, Ubuntu:22.04:LTS: amanda

Maher Azzouzi discovered an information disclosure vulnerability in the calcsize binary within amanda. calcsize is a suid binary owned by root that could possibly be used by a malicious local attacker to expose sensitive file system information. (CVE-2022-37703)

Maher Azzouzi discovered a privilege escalation vulnerability in the rundump binary within amanda. rundump is a suid binary owned by root that did not perform adequate sanitization of environment variables or commandline options and could possibly be used by a malicious local attacker to escalate privileges. (CVE-2022-37704)

Maher Azzouzi discovered a privilege escalation vulnerability in the runtar binary within amanda. runtar is a suid binary owned by root that did not perform adequate sanitization of commandline options and could possibly be used by a malicious local attacker to escalate privileges. (CVE-2022-37705)