In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.
A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
The product writes data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://github.com/bareos/bareos/security/advisories/GHSA-mm45-cg35-54j4 | third party advisory |
| https://bugs.bareos.org/view.php?id=1210 | vendor advisory |
| https://lists.debian.org/debian-lts-announce/2020/08/msg00051.html | third party advisory mailing list |