vulnerability

Amazon Linux AMI 2: CVE-2023-30577: Security patch for amanda (ALAS-2023-2218)

Severity
7
CVSS
(AV:L/AC:L/Au:S/C:C/I:C/A:C)
Published
Jul 26, 2023
Added
Aug 24, 2023
Modified
Jan 28, 2025

Description

AMANDA (Advanced Maryland Automatic Network Disk Archiver) before tag-community-3.5.4 mishandles argument checking for runtar.c, a different vulnerability than CVE-2022-37705.

Solutions

amazon-linux-ami-2-upgrade-amandaamazon-linux-ami-2-upgrade-amanda-clientamazon-linux-ami-2-upgrade-amanda-debuginfoamazon-linux-ami-2-upgrade-amanda-libsamazon-linux-ami-2-upgrade-amanda-server
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.