CVE-2023-30577: High severity zmanda zrm for mysql vulnerability
Published Jul 26, 2023
·Updated
AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.
Affected Software
6 affected componentsFixes available
debian/amanda<=1:3.5.1-2, <=1:3.5.1-7
1:3.5.1-2+deb10u21:3.5.1-11+deb12u11:3.5.1-11.1
ubuntu/amanda<1:3.5.1-1ubuntu0.3+
1:3.5.1-1ubuntu0.3+
ubuntu/amanda<1:3.5.1-2ubuntu0.4
1:3.5.1-2ubuntu0.4
ubuntu/amanda<1:3.5.1-8ubuntu1.4
1:3.5.1-8ubuntu1.4
ubuntu/amanda<1:3.5.1-11ubuntu0.23.10.1
1:3.5.1-11ubuntu0.23.10.1
Zmanda Amanda<3.5.4
Remediation
Event History
Jul 26, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
05:15 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Jan 30, 2024
Data Sourced
via Launchpad·01:53 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2023-30577?
CVE-2023-30577 is rated as a medium severity vulnerability.
2
How do I fix CVE-2023-30577?
To fix CVE-2023-30577, upgrade to AMANDA version 3.5.4 or later.
3
Which versions of AMANDA are affected by CVE-2023-30577?
AMANDA versions prior to 3.5.4 are affected by CVE-2023-30577.
4
What type of attack can exploit CVE-2023-30577?
CVE-2023-30577 can be exploited through improper argument handling in the runtar.c component.
5
Is there a specific fix version for each operating system affected by CVE-2023-30577?
Yes, specific fix versions for various distributions include AMANDA 1:3.5.1-2+deb10u2 for Debian and 1:3.5.1-1ubuntu0.3+ for Ubuntu Bionic.