CVE-2020-11061

CVE-2020-11061 describes a heap overflow vulnerability in Bareos Director versions 16.2.10, 17.2.9, 18.2.8, and 19.2.7 and earlier. A malicious client can exploit this by sending oversized digest strings during the initialization of a verify job, leading to memory corruption. This vulnerability carries a CVSS score of 7.4 (HIGH), indicating it can be exploited remotely with low complexity by a low-privileged attacker, potentially impacting confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.