OESA-2023-1507

    Dashboard / Vulnerabilities / OESA-2023-1507

    OESA-2023-1507

    Published: 18 Aug 2023Last Modified: 18 Aug 2026
    Upstream:
    CVE-2023-30577

    Summary: amanda security update

    Details: AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup system that allows the administrator of a LAN to set up a single master backup server to back up multiple hosts to a single large capacity tape or disk drive. Amanda uses native tools (such as GNUtar, dump) for backup and can back up a large number of workstations running multiple versions of Unix/Mac OS X/Linux/Windows. Security Fix(es): AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.(CVE-2023-30577)

    References: https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1507, https://nvd.nist.gov/vuln/detail/CVE-2023-30577

    Affected packages

    Package

    Name: amanda

    Purl: pkg:rpm/openEuler/amanda&distro=openEuler-20.03-LTS-SP1

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -3.5.4-1.oe1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OESA-2023-1507 | CVE-DB