{"id":"CVE-2020-11061","aliases":["ALPINE-CVE-2020-11061","DEBIAN-CVE-2020-11061","DLA-2353-1","EUVD-2020-3438","GHSA-mm45-cg35-54j4","UBUNTU-CVE-2020-11061"],"status":"published","title":"Heap-based Buffer Overflow in Bareos Director","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","severity":{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.0124,"percentile":0.69536,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-122","CWE-787"],"published":"2020-07-10T19:25:13Z","modified":"2026-11-03T06:32:35Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"bareos","fixed_in":["18.2.9-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"bareos","fixed_in":["19.2.8-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"bacula","fixed_in":["9.6.5-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"bacula","fixed_in":["9.6.5-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"bacula","fixed_in":["9.6.5-1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"bacula","fixed_in":["7.4.4+dfsg-6+deb9u2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"18.2.9-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"17.2.4"},{"fixed":"19.2.8-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"bacula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"bacula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"bacula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.6.5-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"bacula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.4.4+dfsg-6+deb9u2"}]}],"versions":["7.4.4+dfsg-6","7.4.4+dfsg-6+deb9u1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bacula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.6+dfsg-9.1ubuntu4","7.0.5+dfsg-4","7.0.5+dfsg-4build1","7.0.5+dfsg-4ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"bareos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["14.2.5-1","14.2.5-2","14.2.6-1","14.2.6-2","14.2.6-2build1","14.2.6-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"bacula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.4.4+dfsg-6","9.0.4+dfsg-3","9.0.5+dfsg-1","9.0.5+dfsg-3","9.0.5+dfsg-4","9.0.6-1","9.0.6-1build1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"bacula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["9.4.2-2ubuntu3","9.4.2-2ubuntu4","9.4.2-2ubuntu5"]}],"products":[{"vendor":"bareos","product":"bareos"},{"vendor":"bareos gmbh \u0026 co. kg","product":"bareos director"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://github.com/bareos/bareos/security/advisories/GHSA-mm45-cg35-54j4","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","report"]},{"url":"https://bugs.bareos.org/view.php?id=1210","tags":["x_refsource_MISC","x_transferred","Vendor Advisory","advisory","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2020/08/msg00051.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-11061","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-11061","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-11061","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11061","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-11061","title":"Heap-based Buffer Overflow in Bareos Director","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","status":"published","published":"2020-07-10T19:25:13Z","modified":"2024-08-04T11:21:14.507Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:35:57.352161Z"}],"euvd":[{"id":"EUVD-2020-3438","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","status":"published","published":"2020-07-10T19:25:13Z","modified":"2024-08-04T11:21:14Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:07:48.03567Z"}],"nvd":[{"id":"CVE-2020-11061","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","status":"published","published":"2020-07-10T20:15:11.157Z","modified":"2026-06-17T02:48:58.137Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":6,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-122","CWE-787"],"updated_at":"2026-11-02T14:06:09.126752Z"}],"osv":[{"id":"ALPINE-CVE-2020-11061","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","status":"published","published":"2020-07-10T20:15:11.157Z","modified":"2026-11-03T06:32:35.797454269Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2020-11061","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","status":"published","published":"2020-07-10T20:15:11.157Z","modified":"2026-10-20T10:51:45.29153678Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:44:13.492058Z"},{"id":"DEBIAN-CVE-2020-11061","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","status":"published","published":"2020-07-10T20:15:11.157Z","modified":"2026-10-26T12:01:19.397832171Z","cvss":[{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"UBUNTU-CVE-2020-11061","description":"In Bareos Director less than or equal to 16.2.10, 17.2.9, 18.2.8, and 19.2.7, a heap overflow allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem. This issue is also patched in Bareos versions 19.2.8, 18.2.9 and 17.2.10.","status":"published","published":"2020-07-10T20:15:00Z","modified":"2025-10-24T04:48:24Z","cvss":[{"version":"3.1","score":6,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"medium"},{"version":"3.1","score":7.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:54:22.212782Z"},{"id":"DLA-2353-1","title":"bacula - security update","status":"published","published":"2020-08-29T00:00:00Z","modified":"2026-03-09T01:20:42.760379Z","updated_at":"2026-11-02T15:46:10.712745Z"}]}}