USN-3506-1: rsync vulnerabilities | Cloud Foundry

🗓️ 07 Feb 2018 00:00:00Reported by Cloud FoundryType

cloudfoundry

cloudfoundry🔗 www.cloudfoundry.org👁 54 Views

Canonical Ubuntu rsync vulnerabilities affect Cloud Foundry BOSH stemcells and cflinuxfs2 version 1.174.

Reporter	Title	Published	Views	Family All 110
FreeBSD	rsync -- multiple vulnerabilities	17 Dec 201700:00	–	freebsd
ATTACKERKB	CVE-2017-17433	6 Dec 201703:29	–	attackerkb
ATTACKERKB	CVE-2017-17434	6 Dec 201703:29	–	attackerkb
AlpineLinux	CVE-2017-17433	6 Dec 201703:00	–	alpinelinux
AlpineLinux	CVE-2017-17434	6 Dec 201703:00	–	alpinelinux
ArchLinux	[ASA-201801-21] rsync: multiple issues	29 Jan 201800:00	–	archlinux
BDU FSTEC	The vulnerability of the recv_files and read_ndx_and attrs functions in the rsync daemon allows a hacker to circumvent existing access restrictions and compromise the confidentiality, integrity, and accessibility of the protected information.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the recv_files function of the Rsync file transfer and synchronization utility’s receiver.c module allows a attacker to compromise data integrity.	21 Mar 202100:00	–	bdu_fstec
Broadcom	CVE-2018-5764, CVE-2017-16548 and CVE-2017-1734. Vulnerabilities in rsynd	13 Sep 202200:00	–	broadcom
CloudLinux	rsync: Fix of 3 CVEs	21 Apr 202617:13	–	cloudlinux

07 Feb 2018 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 39.8

CVSS 27.5

EPSS0.03362

canonical ubuntu rsync vulnerabilities cloud foundry bosh stemcells cflinuxfs2