Lucene search

K
mageiaGentoo FoundationMGASA-2017-0459
HistoryDec 21, 2017 - 8:43 p.m.

Updated rsync package fixes security vulnerability

2017-12-2120:43:29
Gentoo Foundation
advisories.mageia.org
7

0.087 Low

EPSS

Percentile

94.5%

The receive_xattr function in xattrs.c in rsync 3.1.2 and 3.1.3-development does not check for a trailing ‘\0’ character in an xattr name, which allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly have unspecified other impact by sending crafted data to the daemon. (CVE-2017-16548)

OSVersionArchitecturePackageVersionFilename
Mageia5noarchrsync< 3.1.1-5.3rsync-3.1.1-5.3.mga5
Mageia6noarchrsync< 3.1.2-1.2rsync-3.1.2-1.2.mga6