In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a     malicious client to corrupt the director's memory via oversized digest strings sent during initialization     of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos     versions 19.2.8, 18.2.9 and 17.2.10. (CVE-2020-11061)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Bareos before version 19.2.8 and earlier allows a malicious client to communicate with the director
    without knowledge of the shared secret if the director allows client initiated connection and connects to
    the client itself. The malicious client can replay the Bareos director's cram-md5 challenge to the
    director itself leading to the director responding to the replayed challenge. The response obtained is
    then a valid reply to the directors original challenge. This is fixed in version 19.2.8. (CVE-2020-4042)

  - In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a
    malicious client to corrupt the director's memory via oversized digest strings sent during initialization
    of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos
    versions 19.2.8, 18.2.9 and 17.2.10. (CVE-2020-11061)

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a
    malicious client to corrupt the director's memory via oversized digest strings sent during initialization
    of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos
    versions 19.2.8, 18.2.9 and 17.2.10. (CVE-2020-11061)

An issue has been found in bacula, a network backup service. By sending oversized digest strings a malicious client can cause a heap overflow in the director's memory which results in a denial of service.

For Debian 9 stretch, this problem has been fixed in version 7.4.4+dfsg-6+deb9u2.

We recommend that you upgrade your bacula packages.

For the detailed security status of bacula please refer to its security tracker page at:
https://security-tracker.debian.org/tracker/bacula

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
250714	Linux Distros Unpatched Vulnerability : CVE-2020-11061	Nessus	Misc.	high
403620	Alpine: multiple bareos packages: security update to 19.2.8-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
403620	Alpine: multiple bareos packages: security update to 19.2.8-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
403619	Alpine: multiple bareos packages: security update to 18.2.9-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	high
403619	Alpine: multiple bareos packages: security update to 18.2.9-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	high
140052	Debian DLA-2353-1 : bacula security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2020-11061

high

Tenable Plugins

high

high

high

high

high

high