Vulnerabilitymedium
Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-12084 | Heap-Based Buffer Overflow in rsync Daemon Enables Potential Remote Code Execution | 9.8 | 73% | PoC | |
CVE-2024-12085+3 related CVEs | rsync which could be triggered when rsync compares file checksums: This flaw allows an attacker to manipulate the checksum length (s2length) to cause a comparison between a checksum and… | 7.5 group max | 9% | PoC | |
| CVE-2024-12747 | rsync: This vulnerability arises from a race condition during rsync's handling of symbolic links. Rsync's default behavior when… | 5.6 | <1% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jan 15, 2025 Vulnerability / Software Update As many as six security vulnerabilities have been disclosed in the popular Rsync file-synchronizing tool for Unix systems, some of which could be exploited to execute arbitrary code on a client.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.