https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T23:41:20.116198+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-258808 EUVD-2026-258808 2026-10-15T23:41:20.122327+00:00 EUVD-2026-258808 https://cve.radiocsirt.org/vuln/fkie_cve-2022-37704 fkie_cve-2022-37704 2026-10-15T23:41:20.122369+00:00

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

 https://cve.radiocsirt.org/vuln/ghsa-2699-8r69-fq67 GHSA-2699-8r69-fq67 2026-10-15T23:41:20.122403+00:00

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

 https://cve.radiocsirt.org/vuln/gsd-2022-37704 gsd-2022-37704 2026-10-15T23:41:20.122422+00:00 gsd-2022-37704 https://cve.radiocsirt.org/vuln/oesa-2023-1149 OESA-2023-1149 — amanda security update 2026-10-15T23:41:20.122434+00:00

Affected: openEuler:20.03-LTS-SP1: amanda, openEuler:20.03-LTS-SP3: amanda, openEuler:22.03-LTS: amanda, openEuler:22.03-LTS-SP1: amanda

AMANDA, the Advanced Maryland Automatic Network Disk Archiver, is a backup system that allows the administrator of a LAN to set up a single master backup server to back up multiple hosts to a single large capacity tape or disk drive. Amanda uses native tools (such as GNUtar, dump) for backup and can back up a large number of workstations running multiple versions of Unix/Mac OS X/Linux/Windows. Security Fix(es): A flaw was found in Amanda. The `runtar` SUID binary executes /usr/bin/tar as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user "amandabackup" to root.(CVE-2022-37705) A flaw was found in Amanda. The `rundump` SUID binary executes /usr/sbin/dump as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user "amandabackup" to root.(CVE-2022-37704)

 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0069-1 openSUSE-SU-2023:0069-1 — Security update for amanda 2026-10-15T23:41:20.122470+00:00

Security update for amanda

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-37704 UBUNTU-CVE-2022-37704 2026-10-15T23:41:20.122488+00:00

Affected: Ubuntu:Pro:16.04:LTS: amanda, Ubuntu:18.04:LTS: amanda, Ubuntu:20.04:LTS: amanda, Ubuntu:22.04:LTS: amanda

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.