CVE-2021-21404

Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server strelaysrv can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message...

Jakob Borg syncthing 输入验证错误漏洞

Jakob Borg syncthing is a Jakob Borg open source application. A continuous file synchronization program. A security vulnerability exists in Syncthing before version 1.15.0, which stems from the possibility of crashing and exiting by sending a relay message with a negative length field...

PT-2021-14481 · Syncthing +2 · Syncthing +2

Name of the Vulnerable Software and Affected Versions: Syncthing versions prior to 1.15.0 Description: The issue allows a malicious relay server to cause Syncthing to crash by sending a malformed relay protocol message with a negative length field. Similarly, the relay server strelaysrv can be...

syncthing -- crash due to malformed relay protocol message

syncthing developers report: syncthing can be caused to crash and exit if sent a malformed relay protocol message message with a negative length field. The relay server strelaysrv can be caused to crash and exit if sent a malformed relay protocol message with a negative length field...

openSUSE Security Update : syncthing (openSUSE-2018-45)

This update for syncthing brings a new version and fixes the following issues : - Update to version 0.14.42 : - Discovering new files in a deleted directory does not resurrect the directory ghsyncthing/syncthing4475. - 'Panic: interface conversion: errors.errorString is not net.Error' after resta...

Syncthing Symbolic Link Traversal Vulnerability

Syncthing is an open source continuous file synchronization program. A security vulnerability exists in Syncthing 0.14.33 and earlier versions. An attacker can exploit the vulnerability to overwrite arbitrary files...

Design/Logic Flaw

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

DEBIAN-CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

UBUNTU-CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

CVE-2017-1000420

CVE-2017-1000420 affects Syncthing up to version 0.14.33, where a symlink traversal flaw allows overwriting arbitrary files. Public documents confirm the root cause is symlink traversal in versioned directories, enabling arbitrary file overwrite, with multiple advisories referencing the same CVE....

CVE-2017-1000420

Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite...

POODLE Attack

github.com/syncthing/syncthing is vulnerable to POODLE attacks. A malicious user can compromise the SSL 3.0 channel to listen in and execute a man-in-the-middle MitM attacks. This is related to CVE-2014-3566...

Directory Traversal

github.com/syncthing/syncthing is vulnerable to directory traversal attacks. Attackers are able to traverse directories by putting .. in a path for an index entry...

openSUSE Security Update : syncthing / syncthing-gtk (openSUSE-2017-29)

This updates syncthing to version 0.14.16 and fixes the following issues : The following security issue was fixed : - A remote device that was already accepted by syncthing could perform arbitrary reads and writes outside of the configured directories boo1016161 This update also contains a number...

openSUSE Security Update : syncthing / syncthing-gtk (openSUSE-2017-30)

This updates syncthing to version 0.14.16 and fixes the following issues : The following security issue was fixed : - A remote device that was already accepted by syncthing could perform arbitrary reads and writes outside of the configured directories boo1016161 This update also contains a number...

Analyzing Go Vendoring with BigQuery

GitHub published a snapshot of all the public open-source repositories to BigQuery and Francesc used it to draw some cool statistics about Go projects. I used the same dataset to analyze how the Go ecosystem does vendoring. Disclosure: there's some ego stroking here, as I'm the author of gvt. Try...