CVE-2018-20013

In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::ProcessPacket metadata_id!=0 assertion, leading to shutting down the client application.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-06-18

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Urbackup (Urbackup)

References

• http://www.urbackup.org/client_changelog.html
• https://github.com/MostafaSoliman/Security-Advisories/blob/master/CVE-2018-20013