Lucene search
Gentoo FoundationGLSA-201605-04HistoryMay 30, 2016 - 12:00 a.m.
rsync: Multiple vulnerabilities
2016-05-3000:00:00
Gentoo Foundation
security.gentoo.org
11
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.016 Low
EPSS
Percentile
87.2%
Background
File transfer program to keep remote files into sync.
Description
Multiple vulnerabilities have been discovered in rsync. Please review the CVE identifiers referenced below for details.
Impact
Remote attackers could write arbitrary files via symlink attacks.
Workaround
There is no known workaround at this time.
Resolution
All rsync users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/rsync-3.1.2"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | net-misc/rsync | < 3.1.2 | UNKNOWN |
Related
nessus
nessus
SUSE SLED11 / SLES11 Security Update : rsync (SUSE-SU-2016:0176-1)
2016-01-20 00:00:00
GLSA-201605-04 : rsync: Multiple vulnerabilities
2016-05-31 00:00:00
SUSE SLED12 / SLES12 Security Update : rsync (SUSE-SU-2016:0173-1)
2016-01-20 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2016:0173-1)
2021-04-19 00:00:00
SUSE: Security Advisory (SUSE-SU-2016:0176-1)
2021-06-09 00:00:00
Fedora Update for csync2 FEDORA-2015-3366
2015-03-20 00:00:00
archlinux
archlinux
librsync: checksum collision
2015-03-16 00:00:00
prion
prion
Code injection
2015-10-26 17:59:00
Path traversal
2015-02-12 16:59:00
fedora
fedora
[SECURITY] Fedora 21 Update: rdiff-backup-1.2.8-14.fc21
2015-03-19 18:44:40
[SECURITY] Fedora 22 Update: duplicity-0.6.25-3.fc22
2015-03-09 08:18:48
[SECURITY] Fedora 21 Update: librsync-1.0.0-1.fc21
2015-03-19 18:44:40
freebsd
freebsd
librsync -- collision vulnerability
2014-07-28 00:00:00
debiancve
debiancve
CVE-2014-8242
2015-10-26 17:59:00
CVE-2014-9512
2015-02-12 16:59:00
ubuntucve
ubuntucve
CVE-2014-8242
2015-10-26 00:00:00
CVE-2014-9512
2015-02-12 00:00:00
securityvulns
securityvulns
librsync weak permission
2015-05-05 00:00:00
[ MDVSA-2015:204 ] librsync
2015-05-05 00:00:00
cve
cve
CVE-2014-8242
2015-10-26 17:59:00
CVE-2014-9512
2015-02-12 16:59:00
mageia
mageia
Updated librsync packages fix security vulnerabilities
2015-04-15 12:01:28
ubuntu
ubuntu
rsync vulnerability
2016-01-21 00:00:00
apple
apple
About the security content of tvOS 13.4.5 - Apple Support
2020-09-21 04:33:14
About the security content of watchOS 6.2.5 - Apple Support
2020-09-21 04:34:00
About the security content of watchOS 6.2.5
2020-05-18 00:00:00
6.4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:P/A:P
0.016 Low
EPSS
Percentile
87.2%
Related for GLSA-201605-04