borgbackup@1.1.0b5 vulnerabilities
Deduplicated, encrypted, authenticated and compressed backups
-
latest version
1.2.8
-
latest non vulnerable version
-
first published
9 years ago
-
latest version published
2 months ago
-
licenses detected
- [0,)
Direct Vulnerabilities
Known vulnerabilities in the borgbackup package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Improper Authorization due to allowing an attacker to access a mount with How to fix Improper Authorization? Upgrade |
[,1.1.9)
|
Affected versions of this package are vulnerable to Cryptographic Operations are run Before Supporting Units are Ready due to a flaw in the cryptographic authentication scheme. An attacker can fake archives and potentially indirectly cause backup data loss in the repository by inserting files (with no additional headers) into backups and gaining write access to the repository. Note: Data loss after being attacked can be avoided by reviewing the archives (timestamp and contents valid and as expected) after any "borg check --repair" and before "borg prune". How to fix Cryptographic Operations are run Before Supporting Units are Ready? Upgrade |
[,1.2.5)
|
Affected versions of the package are vulnerable to Access Restriction Bypass. Incorrect implementation of access controls allows remote users to override repository restrictions in Borg servers. A user able to access a remote Borg SSH server is able to circumvent access controls post-authentication. How to fix Access Restriction Bypass? Upgrade |
[1.1.0b1,1.1.3)
|