high7.5
CVE-2018-20014
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFi…
Impact
In UrBackup 2.2.6, an attacker can send a malformed request to the client over the network, and trigger a fileservplugin/CClientThread.cpp CClientThread::GetFileHashAndMetadata NULL pointer dereference, leading to shutting down the client application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Urbackup | Urbackup | Version 2.2.6 |