CVE-2017-16895 | BDVDB-2026-93584 Detail

Description#

The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.exploit-db.com/exploits/43216/
https://www.arqbackup.com/blog/arq-mac-import-security-update/
https://m4.rkw.io/blog/cve201716895-local-root-privesc-in-arq-backup--597.html

Exploit#

https://www.exploit-db.com/exploits/43216/

History#

Version 12017-12-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.