CVE-2017-16895 The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges v...
HighCVSS 7.8
EPSS 1.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arqbackup arq | >= 5.0.0.65, < 5.10 | 5.10 |
References
- m4.rkw.io third-party-advisory
- www.arqbackup.com broken-link
- 43216 exploit third-party-advisory vdb-entry