VYPR

Urbackup

by UrBackup

CVEs (2)

  • CVE-2018-20013HigJun 18, 2019
    risk 0.49cvss 7.5epss 0.01

    In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::ProcessPacket metadata_id!=0 assertion, leading to shutting down the client application.

  • CVE-2018-20014HigJun 7, 2019
    risk 0.49cvss 7.5epss 0.01

    In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application.