Bug 2226889 (CVE-2023-30577) - CVE-2023-30577 amanda: Improper argument checking for runtar.c
Summary: CVE-2023-30577 amanda: Improper argument checking for runtar.c
Keywords:
Status: NEW
Alias: CVE-2023-30577
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2226890 2226892
Blocks: 2226891
TreeView+ depends on / blocked
 
Reported: 2023-07-26 20:39 UTC by Pedro Sampaio
Modified: 2023-09-22 21:19 UTC (History)
2 users (show)

Fixed In Version: amanda tag-community-3.5.4
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)

Description Pedro Sampaio 2023-07-26 20:39:46 UTC
AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.

References:

https://github.com/zmanda/amanda/releases/tag/tag-community-3.5.4
https://github.com/zmanda/amanda/pull/228

Comment 1 Pedro Sampaio 2023-07-26 20:40:00 UTC
Created amanda tracking bugs for this issue:

Affects: fedora-all [bug 2226890]


Note You need to log in before you can comment on or make changes to this bug.