SUSE-SU-2025:0157-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. bsc1234101 - CVE-2024-12086: leak of a client machine's file contents through the processing of checksum data. bsc1234102 - CVE-2024-12087: arbitrary...

SUSE-SU-2025:0156-1 Security update for rsync

This update for rsync fixes the following issues: - CVE-2024-12084: heap buffer overflow in checksum parsing. bsc1234100 - CVE-2024-12085: leak of uninitialized stack data on the server leading to possible ASLR bypass. bsc1234101 - CVE-2024-12086: leak of a client machine's file contents through...

The vulnerability in the `-inc-recursive` configuration of the rsyncd daemon’s utility for transferring and synchronizing files allows a attacker to write arbitrary files.

The vulnerability of the -inc-recursive configuration of the rsyncd daemon, a utility for transferring and synchronizing files, involves traversing directory paths without checking for symbolic links, along with checks for duplication. Exploiting this vulnerability allows an attacker to write...

RockyLinux 8 : rsync (RLSA-2025:0325)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:0325 advisory. rsync: Info Leak via Uninitialized Stack Contents CVE-2024-12085 Tenable has extracted the preceding description block directly from the RockyLinux security...

Amazon Linux AMI : rsync (ALAS-2025-1955)

The version of rsync installed on the remote host is prior to 3.0.6-12.17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2025-1955 advisory. A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an...

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files involves a buffer overflow when processing the length of the checksum. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service interruptions remotely...

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files involves the generation of invalid tokens and checksums during the copying process. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Important: rsync

Issue Overview: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : rsync regression (USN-7206-2)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-7206-2 advisory. USN-7206-1 fixed vulnerabilities in rsync. The update introduced a regression in rsync. This update...

Important: rsync

Issue Overview: A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison between a checksum and uninitialized memory and leak one byte of uninitialized stack data...

The vulnerability of the `-safe-links` configuration in the rsyncd daemon’s utility for transferring and synchronizing files allows a hacker to write arbitrary files.

The vulnerability of the -safe-links configuration in the rsyncd daemon’s utility for transferring and synchronizing files involves bypassing the directory path check, resulting in the absence of symbolic link checks. Exploiting this vulnerability allows a remote attacker to write arbitrary files...

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files allows a attacker to bypass ASLR protection and gain unauthorized access to protected information.

The vulnerability of the rsyncd utility for transferring and synchronizing Rsync files is related to the issue of the operation exceeding the buffer boundaries due to incorrect comparison of file checksums. Exploiting this vulnerability allows a malicious actor to bypass the ASLR protection and...

Amazon Linux 2 : rsync (ALAS-2025-2731)

The version of rsync installed on the remote host is prior to 3.1.2-11. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2025-2731 advisory. A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an...

Amazon Linux 2023 : rsync, rsync-daemon (ALAS2023-2025-801)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-801 advisory. A flaw was found in the rsync daemon which could be triggered when rsync compares file checksums. This flaw allows an attacker to manipulate the checksum length s2length to cause a comparison...

[SECURITY] [DSA 5843-2] rsync regression update

------------------------------------------------------------------------- Debian Security Advisory DSA-5843-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 16, 2025 https://www.debian.org/security/faq -...

CVE-2024-12747 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12747 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12085 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12085 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12088 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12088 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12084 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12084 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-12086 affecting package rsync for versions less than 3.4.1-1

CVE-2024-12086 affecting package rsync for versions less than 3.4.1-1. An upgraded version of the package is available that resolves this issue...