rsync vulnerabilities

2018-01-23T00:00:00
ID USN-3543-2
Type ubuntu
Reporter Ubuntu
Modified 2018-01-23T00:00:00

Description

USN-3543-1 fixed vulnerabilities in rsync. This update
provides the corresponding update for Ubuntu 12.04 ESM.

Original advisory details:

It was discovered that rsync incorrectly handled certain data input.
An attacker could possibly use this to cause a denial of service or
execute arbitrary code. (CVE-2017-16548)

It was discovered that rsync incorrectly parsed certain arguments. An attacker
could possibly use this to bypass arguments and execute arbitrary code.
(CVE-2018-5764)