2535 matches found
Important: rsync
Issue Overview: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data...
Important: rsync
Issue Overview: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data...
CLSA-2025-1737463274 rsync: Fix of 2 CVEs
CVE-2024-12088: fix path traversal vulnerability by properly verifying symbolic link destinations - CVE-2024-12085: fix issue with checksum length manipulation leading to uninitialized memory leak...
CLSA-2025-1737464920 rsync: Fix of 2 CVEs
CVE-2024-12088: fix path traversal vulnerability by properly verifying symbolic link destinations - CVE-2024-12085: fix issue with checksum length manipulation leading to uninitialized memory leak...
CLSA-2025-1737464476 rsync: Fix of CVE-2024-12085
CVE-2024-12085: prevent leak of uninitialised stack data in hashsearch...
[SECURITY] Fedora 41 Update: rsync-3.4.1-1.fc41
Rsync uses a reliable algorithm to bring remote and host files into sync very quickly. Rsync is fast because it just sends the differences in the files over the network instead of sending the complete files. Rsync is often used as a very powerful mirroring process or just as a more capable...
Fedora 41 : rsync (2025-3ec637e6e9)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-3ec637e6e9 advisory. New version 3.4.1, a couple of fixes for the 3.4.0 release. ---- New version 3.4.0. Contains fixes for CVE-2024-12084, CVE-2024-12085, CVE-2024-1208...
SUSE: Security Advisory (SUSE-SU-2025:0157-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2025:0166-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2025:0165-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Rsync: path traversal vulnerability in rsync
...
Rsync: rsync server leaks arbitrary client files
...
Rsync: info leak via uninitialized stack contents
...
Rsync: race condition in rsync handling symbolic links
...
Rsync: --safe-links option bypass leads to path traversal
...
Rsync: heap buffer overflow in rsync due to improper checksum length handling
...
CBL Mariner 2.0 Security Update: rsync (CVE-2024-12085)
The version of rsync installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-12085 advisory. - A flaw was found in rsync which could be triggered when rsync compares file checksums. This flaw allows an...
SUSE SLES15 Security Update : rsync (SUSE-SU-2025:0165-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:0165-1 advisory. - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. bsc1234101 - CVE-2024-12086: leak...