CVE-2022-37704 (amanda)

Amanda 3.5.1 allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of service, and information disclosure.

amanda backup binary cve denial of service disclosure escalation information information disclosure may privilege privilege escalation privileges root service