CVE-2019-6724: High severity barracuda network access client vulnerability

Published Mar 18, 2019
·
Updated

The barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD runs as a privileged process and can allow an unprivileged local attacker to load a malicious library, resulting in arbitrary code executing as root.

Affected Software

8 affected components
All of the following
Barracuda VPN Client<5.0.2.7
Any of the following
Apple iOS and macOS
Linux Linux kernel
OpenBSD OpenBSD
Barracuda VPN Client<5.0.2.7
Apple iOS and macOS
Linux Linux kernel
OpenBSD OpenBSD

Event History

Mar 18, 2019
CVE Published
via MITRE·07:12 PM
Data Sourced
via MITRE·07:12 PM
Description
Mar 21, 2019
Data Sourced
via NVD·04:01 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is CVE-2019-6724?

CVE-2019-6724 is a vulnerability in the barracudavpn component of the Barracuda VPN Client prior to version 5.0.2.7 for Linux, macOS, and OpenBSD.

2

What is the severity of CVE-2019-6724?

The severity of CVE-2019-6724 is high with a severity score of 7.8.

3

How can an attacker exploit CVE-2019-6724?

An unprivileged local attacker can exploit CVE-2019-6724 by loading a malicious library, resulting in arbitrary code execution as root.

4

Is Apple Mac OS X affected by CVE-2019-6724?

No, Apple Mac OS X is not affected by CVE-2019-6724.

5

Is Linux Linux kernel affected by CVE-2019-6724?

No, Linux Linux kernel is not affected by CVE-2019-6724.

6

Is Openbsd Openbsd affected by CVE-2019-6724?

No, Openbsd Openbsd is not affected by CVE-2019-6724.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203