Lucene search

K
ubuntuUbuntuUSN-2879-1
HistoryJan 21, 2016 - 12:00 a.m.

rsync vulnerability

2016-01-2100:00:00
ubuntu.com
31

8.6 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.016 Low

EPSS

Percentile

87.2%

Releases

  • Ubuntu 15.10
  • Ubuntu 15.04
  • Ubuntu 14.04 ESM
  • Ubuntu 12.04

Packages

  • rsync - fast, versatile, remote (and local) file-copying tool

Details

It was discovered that rsync incorrectly handled invalid filenames. A
malicious server could use this issue to write files outside of the
intended destination directory.

OSVersionArchitecturePackageVersionFilename
Ubuntu15.10noarchrsync< 3.1.1-3ubuntu0.15.10.1UNKNOWN
Ubuntu15.04noarchrsync< 3.1.1-3ubuntu0.15.04.1UNKNOWN
Ubuntu14.04noarchrsync< 3.1.0-2ubuntu0.2UNKNOWN
Ubuntu12.04noarchrsync< 3.0.9-1ubuntu1.1UNKNOWN

8.6 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.016 Low

EPSS

Percentile

87.2%