USN-3506-1: rsync vulnerabilities

🗓️ 07 Dec 2017 13:02:53Reported by UbuntuType

Security vulnerabilities in rsync for Ubuntu 17.10, 17.04, 16.04 ESM, and 14.04 ESM allow attackers to bypass access restrictions.

Reporter	Title	Published	Views	Family All 110
FreeBSD	rsync -- multiple vulnerabilities	17 Dec 201700:00	–	freebsd
ATTACKERKB	CVE-2017-17433	6 Dec 201703:29	–	attackerkb
ATTACKERKB	CVE-2017-17434	6 Dec 201703:29	–	attackerkb
AlpineLinux	CVE-2017-17433	6 Dec 201703:00	–	alpinelinux
AlpineLinux	CVE-2017-17434	6 Dec 201703:00	–	alpinelinux
ArchLinux	[ASA-201801-21] rsync: multiple issues	29 Jan 201800:00	–	archlinux
BDU FSTEC	The vulnerability of the recv_files and read_ndx_and attrs functions in the rsync daemon allows a hacker to circumvent existing access restrictions and compromise the confidentiality, integrity, and accessibility of the protected information.	17 Dec 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the recv_files function of the Rsync file transfer and synchronization utility’s receiver.c module allows a attacker to compromise data integrity.	21 Mar 202100:00	–	bdu_fstec
Broadcom	CVE-2018-5764, CVE-2017-16548 and CVE-2017-1734. Vulnerabilities in rsynd	13 Sep 202200:00	–	broadcom
Cloud Foundry	USN-3506-1: rsync vulnerabilities \| Cloud Foundry	7 Feb 201800:00	–	cloudfoundry

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	14.04	any	rsync	3.1.0-2ubuntu0.3	rsync_3.1.0-2ubuntu0.3_any.deb
Ubuntu	16.04	any	rsync	3.1.1-3ubuntu1.1	rsync_3.1.1-3ubuntu1.1_any.deb
Ubuntu	17.04	any	rsync	3.1.2-1ubuntu0.1	rsync_3.1.2-1ubuntu0.1_any.deb
Ubuntu	17.10	any	rsync	3.1.2-2ubuntu0.1	rsync_3.1.2-2ubuntu0.1_any.deb

07 Dec 2017 13:02Current

7.1High risk

Vulners AI Score7.1

CVSS 39.8

CVSS 27.5

EPSS0.03362