CVE-2022-37704
Ubuntu Security Notice USN-5966-2
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.
Maher Azzouzi discovered an information disclosure vulnerability in the calcsize binary within amanda. calcsize is a suid binary owned by root that could possibly be used by a malicious local attacker to expose sensitive file system information. Maher Azzouzi discovered a privilege escalation vulnerability in the rundump binary within amanda. rundump is a suid binary owned by root that did not perform adequate sanitization of environment variables or commandline options and could possibly be used by a malicious local attacker to escalate privileges.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2022-08-08 CVE Reserved
- 2023-03-23 CVE Published
- 2025-02-06 CVE Updated
- 2025-02-06 First Exploit
- 2025-04-10 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (11)
| URL | Date | SRC |
|---|---|---|
| https://github.com/MaherAzzouzi/CVE-2022-37704 | 2025-02-06 |
| URL | Date | SRC |
|---|---|---|
| https://github.com/zmanda/amanda/pull/197 | 2023-11-07 | |
| https://github.com/zmanda/amanda/pull/205 | 2023-11-07 |