CVE-2020-11061

Name of the Vulnerable Software and Affected Versions Bareos Director versions prior to 16.2.11 Bareos Director versions prior to 17.2.10 Bareos Director versions prior to 18.2.9 Bareos Director versions prior to 19.2.8

Description A heap overflow in the Bareos Director allows a malicious client to corrupt the director's memory via oversized digest strings sent during initialization of a verify job. Disabling verify jobs mitigates the problem.

Recommendations For Bareos Director version 16.2.10 and earlier, update to version 16.2.11 or later. For Bareos Director version 17.2.9, update to version 17.2.10 or later. For Bareos Director version 18.2.8, update to version 18.2.9 or later. For Bareos Director version 19.2.7, update to version 19.2.8 or later. As a temporary workaround, consider disabling verify jobs until a patch is available.