CVE-2024-52522

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Insecure handling of symlinks with --links and --metadata in rclone while copying to local disk allows unprivileged users to indirectly modify ownership and permissions on symlink target...

CVE-2024-52522

CVE-2024-52522 affects rclone. Insecure handling of symlinks when copying to local disks with --links and --metadata allows an unprivileged user to indirectly modify ownership/permissions on the symlink targets during a copy performed by a privileged process, potentially enabling privilege escala...

PT-2024-35354 · Rclone +2 · Rclone +2

Name of the Vulnerable Software and Affected Versions: rclone versions prior to 1.68.2 Description: The issue is related to insecure handling of symlinks with --links and --metadata in rclone while copying to local disk. This allows unprivileged users to indirectly modify ownership and permission...

rclone-1.68.1-2.1 on GA media (moderate)

rclone-1.68.1-2.1 on GA media Announcement ID: openSUSE-SU-2024:14495-1 Rating: moderate Cross-References: CVE-2024-51744 CVSS scores: CVE-2024-51744 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2024-51744 SUSE : 2.1 CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N...

Rclone 安全漏洞

Rclone is a software from the Rclone team that synchronizes data asynchronously from cloud storage. The software supports Google Drive, Amazon Drive, S3, Dropbox, Backblaze B2, One Drive, Swift, Hubic, Cloudfiles, Google Cloud Storage, Yandex Files and other cloud storage. A security vulnerabilit...

OPENSUSE-SU-2024:14495-1 rclone-1.68.1-2.1 on GA media

These are all security issues fixed in the rclone-1.68.1-2.1 package on the GA media of openSUSE Tumbleweed...

Fedora 41 : rclone (2024-3ef0d3c37d)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-3ef0d3c37d advisory. Automatic update for rclone-1.67.0-1.fc41. Changelog Fri Aug 9 2024 Mikel Olasagasti Uranga - 1.67.0-1 - Update to 1.67.0 - Closes rhbz2251762...

Fedora: Security Advisory (FEDORA-2023-ff1e594f3d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2023-2f0957b051)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GO-2022-0878 Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone

Use of Cryptographically Weak Pseudo-Random Number Generator in Rclone in github.com/rclone/rclone...

Cloning Content to Linode Object Storage with RClone

...

OPENSUSE-SU-2024:14053-1 rclone-1.67.0-1.1 on GA media

These are all security issues fixed in the rclone-1.67.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13781-1 rclone-1.66.0-1.1 on GA media

These are all security issues fixed in the rclone-1.66.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13569-1 rclone-1.65.1-1.1 on GA media

These are all security issues fixed in the rclone-1.65.1-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11297-1 rclone-1.55.1-1.3 on GA media

These are all security issues fixed in the rclone-1.55.1-1.3 package on the GA media of openSUSE Tumbleweed...

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: hugo, buildkitd, wal-g, secrets-store-csi-driver-provider-azure, zot, restic, ksops, zarf, py3-cassandra-medusa, k8sgpt, pulumi, druid, harbor-registry, hugo-extended, flux-source-controller, grafana-agent-operator, velero, flux-image-reflector-controller, nuclei,...

Fedora 40 : rclone (2023-ff1e594f3d)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ff1e594f3d advisory. Automatic update for rclone-1.64.0-1.fc40. Changelog Thu Oct 12 2023 Mikel Olasagasti Uranga - 1.64.0-1 - Update to 1.64.0 - Closes rhbz2238581...

PT-2024-12934 · Undefined · Undefined

OSINT CTI Qlik Sense Users - Adversary Tactics: - Initial Access: CVE-2023-412662, CVE-2023-412653 - RMMs: ManageEngine UEMS, Zoho Assist, DWAgent - Lateral Mov: RDP & PuTTY Link8 - Exfil: WizTree & Rclone - Impact: Cactus Ransomware https://t.co/gt0dhuFniS...

PT-2024-12933 · Undefined · Undefined

OSINT CTI Qlik Sense Users - Adversary Tactics: - Initial Access: CVE-2023-412662, CVE-2023-412653 - RMMs: ManageEngine UEMS, Zoho Assist, DWAgent - Lateral Mov: RDP & PuTTY Link8 - Exfil: WizTree & Rclone - Impact: Cactus Ransomware https://t.co/gt0dhuFniS...

BIT-RCLONE-2020-28924

An issue was discovered in Rclone before 1.53.3. Due to the use of a weak random number generator, the password generator has been producing weak passwords with much less entropy than advertised. The suggested passwords depend deterministically on the time the second rclone was started. This limi...